← Database

CVE-2023-24539

HIGH CVSS: 7.3 Published: 2023-05-11 Modified: 2026-06-17

Description

Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.

Affected Platforms

Golang Go

Weakness Type

CWE-74, CWE-94

References