CVE-2025-55166CWE-601CWE-79

svg-sanitizer By-Passing Attribute Sanitization

Medium · published August 12, 2025

CVSS v4.0
5.1
EPSS
0%
Percentile
38.1
In the wild
Unconfirmed
What it is

savg-sanitizer is a PHP SVG/XML sanitizer. Prior to version 0.22.0, the sanitization logic in the cleanXlinkHrefs method only searches for lower-case attribute name, which allows to by-pass the isHrefSafeValue check. As a result this allows cross-site scripting or linking to external domains. This issue has been patched in version 0.22.0.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00450 · 38.1th percentile
Weaknesses
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect'); CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-08-12T16:25Z
EPSS history
Timeline
  • 12 AUG 16:25Z
    svg-sanitizer By-Passing Attribute Sanitization
    cvelistv5