Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

ezyang/htmlpurifier

4 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4
Registry
Packagist

Advisories 4

  • HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the…

    Affected: through 4.2.0.

  • Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers…

    Affected: fixed in 4.1.0.

  • Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet…

    Affected: fixed in 4.1.1.

  • Cross-site scripting (XSS) vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject…

    Affected: fixed in 2.0.1.