CVE-2022-28367

OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input

published April 21, 2022

CVSS
—
EPSS
1%
Percentile
62.7
In the wild
Unconfirmed
What it is

OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01006 · 62.7th percentile
Published
2022-04-21T22:42Z
EPSS history
Timeline
  • 21 APR 22:42Z
    OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input
    cvelistv5