CVE-2020-6802

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option.

Affected products

Bleach, Linuxmint, Suse, Ubuntu

Mozilla Bleach

< 3.1.1

Fix

Available

CVSS 3.1

6.1 MEDIUM

EPSS

1.7% (76th percentile)

Weakness

CWE-79

NVD status

Modified

Published

2020-03-24