medium6.1
CVE-2019-16728
DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS (mXSS) for an SVG element or a MATH element, as demonstrated by Chrome and Safari.
Impact
DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS (mXSS) for an SVG element or a MATH element, as demonstrated by Chrome and Safari.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cure53 | Dompurify | before 2.0.1 |
| Debian | Debian Linux | Version 9.0 |