← Back to CVE List

CVE-2022-28367

Published: 2022-04-21T23:15Z
Last Modified: 2024-11-21T06:57Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt