← Back to browse · API

CVE-2024-47875

Severity
CRITICAL
CVSS
10.0
EPSS
0.0107
Risk score
40.37
CISA KEV
No
PoC
No
Published
2024-10-11
Modified
2025-11-03
First seen
2026-08-07
Aliases
EUVD-2024-3049, GHSA-GX9M-WHJM-85JF
Products
cure53:DOMPurify < 2.5.0, cure53:DOMPurify < 3.1.3
Sources
euvd EUVD-2024-3049

Description

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3.

References