CVE-2022-29577

Published: 2022-04-21T23:15Z

Last Modified: 2024-11-21T06:59Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content. NOTE: this issue exists because of an incomplete fix for CVE-2022-28367. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt