Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

JavaScript Library

DOMPurify

DOMPurify is a DOM-only super-fast uber-tolerant XSS sanitizer for HTML MathML and SVG.

Official Site:

https://cure53.de/purify

Severity Summary:

Medium: 3
Reference
Title
Severity
CVE-2019-16728
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-26870
DOMPurify Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2019-25155
DOMPurify URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium