Skip to content
Not rated

CVE-2020-6802 In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the…

Description

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option.

Affected products and versions

Product Affected versions Fixed in
Mozilla Bleach 3.10 earliest → 3.10 No fix stated
The 2 CVEs of Mozilla Bleach →
Track this CVE