← Database

CVE-2022-21169

HIGH CVSS: 7.3 Published: 2022-09-26 Modified: 2026-06-17

Description

The package express-xss-sanitizer before 1.1.3 are vulnerable to Prototype Pollution via the allowedTags attribute, allowing the attacker to bypass xss sanitization.

Affected Platforms

Express Xss Sanitizer Project Express Xss Sanitizer

Weakness Type

CWE-1321, CWE-1321

References