Junglewise Threat Intelligence

CVE-2023-28426: svg-sanitizer has Cross-site Scripting Bypass

CVE-2023-28426 · Severity: low · CVSS 3.1 · Published 2023-03-20

Technologies: enshrined/svg-sanitize (Packagist). Vendors: Packagist.

Executive brief

svg-sanitizer has Cross-site Scripting Bypass

Affected products

  • Packagist enshrined/svg-sanitize

Related threats