Threat Encyclopedia

python-lxml: missing input sanitization for formaction HTML5 attributes may lead to XSS

Description

The vulnerabilities in the following products could cause the system to become vulnerable to malicious security attack: python-lxml

Analysis

missing input sanitization for formaction HTML5 attributes may lead to XSS

Affected Products

python-lxml

CVE References

CVE-2021-28957