Moderate severity vulnerability that affects org.owasp.antisamy:antisamy

In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impact is XSS.

Vulnerability ID: GHSA-683w-6h9j-57wq
Aliases: CVE-2016-10006
Published: 2018-10-18 17:21:47
CWE: CWE-79
Severity rating: MODERATE
CVSS: type: CVSS_V3
score: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected packages:
package: ecosystem: Maven
name: org.owasp.antisamy:antisamy