Junglewise Threat Intelligence

CVE-2019-18857: XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes

CVE-2019-18857 · Severity: low · CVSS 3.1 · Published 2020-01-08

Technologies: enshrined/svg-sanitize (Packagist). Vendors: Packagist.

Executive brief

XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes

Affected products

  • Packagist enshrined/svg-sanitize

Related threats