Htmlpurifier - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2011-09-23.

Products

• Htmlpurifier - 3 CVEs
• Html Purifier - 1 CVEs

Newest CVEs of Htmlpurifier

• CVE-2011-3744 - CVSS 5 (medium), 2011-09-23: HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an…
• CVE-2010-4183 - CVSS 4.3 (medium), 2010-11-05: Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary…
• CVE-2010-2479 - CVSS 4.3 (medium), 2010-07-06: Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows…
• CVE-2007-3498 - CVSS 4.3 (medium), 2007-06-29: Cross-site scripting (XSS) vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or…