CVE-2026-41238 | cure53 DOMPurify up to 3.3.1 cross site scripting

April 22, 2026 Yanac

A vulnerability has been found in cure53 DOMPurify up to 3.3.1 and classified as problematic. Affected is an unknown function. Performing a manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-41238. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More