EDB-39155
functionallxml - 'clean_html' Security Bypass
view exploit source exploit_dbverifiedtype remoteauthor Maksim Kochkinpublished 2014-04-15catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-3146US | medium4.3 | Exploit | ||
Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters i… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan