CVE-2019-25225 | sanitize-html 1.4.3 index.js sanitizeHtml transformTags cross site scripting (Issue 293 / EUVD-2019-19375)

September 8, 2025 Yanac

A vulnerability marked as problematic has been reported in sanitize-html 1.4.3. This affects the function sanitizeHtml of the file index.js. Performing manipulation of the argument transformTags results in cross site scripting.

This vulnerability is identified as CVE-2019-25225. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More