← Database

CVE-2022-23638

MEDIUM CVSS: 6.2 Published: 2022-02-14 Modified: 2026-06-17

Description

svg-sanitizer is a SVG/XML sanitizer written in PHP. A cross-site scripting vulnerability impacts all users of the `svg-sanitizer` library prior to version 0.15.0. This issue is fixed in version 0.15.0. There is currently no workaround available.

Affected Platforms

Svg-Sanitizer Project Svg-Sanitizer

Weakness Type

CWE-79

References