CVE-2021-23980

Vulnerability Description

A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tags the keyword argument strip_comments=False Note: none of the above tags are in the default allowed tags and strip_comments defaults to True.

Vulnerability Details

Published Date

February 16, 2023

Last Modified

March 19, 2025

Source

NVD

CVE-2021-23980

Vulnerability Description

Vulnerability Details

Discussion (0)

Add Comment