Known vulnerabilities in HTML Sanitizer

Vendor: TYPO3
Software: HTML Sanitizer
Software CPE: cpe:2.3:a:typo3:html_sanitizer:*:*:*:*:*:*:*:*
Website: https://typo3.org/
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting HTML Sanitizer HTML Sanitizer is affected by 6 known vulnerabilities: 4 medium, 2 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134019 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47344		 CWE-79 Medium
No
No
 2.3.2 09.06.2026 SB2026060949
SB2026061968
#VU134018 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47345		 CWE-79 Medium
No
No
 2.3.2 09.06.2026 SB2026060949
SB2026061968
#VU134017 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-47125		 CWE-79 Medium
No
No
 1.5.3, 2.1.4 14.11.2023 SB2023111494
#VU78747 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-38500		 CWE-79 Low
No
No
 1.5.1, 2.1.2 28.07.2023 SB2023072822
#VU70772 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23499		 CWE-79 Low
No
No
 1.5.0, 2.1.1 06.01.2023 SB2023010614
#VU67219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36020		 CWE-79 Medium
No
No
 1.0.7, 2.0.16 13.09.2022 SB2022091322
SB2022091392