CVE-2026-25543mediumCWE-116

CVE-2026-25543: falha de média gravidade em mganss HtmlSanitizer

HtmlSanitizer has a bypass via template tag

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar HtmlSanitizer+ Monitorar HtmlSanitizer

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.3%
HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. Prior to versions 9.0.892 and 9.1.893-beta, if the template tag is allowed, its contents are not sanitized. The template tag is a special tag that does not usually render its contents, unless the shadowrootmode attribute is set to open or closed. This issue has been patched in versions 9.0.892 and 9.1.893-beta.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Produtos afetados
mganss · HtmlSanitizer
CVEs relacionadas — mganss HtmlSanitizer

No mesmo produto, das mais perigosas para as menos.

CVE-2020-26293MEDIUMPossible XSS bypass if style tag is allowedEPSS 1.0%CVE-2023-44390MEDIUMHtmlSanitizer vulnerable to Cross-site Scripting in Foreign ContentEPSS 0.4%CVE-2026-116538LOWHtmlSanitizer before 9.2.1039 XSS via SanitizeDom Body and HTML AttributesEPSS 0.3%