CVE-2026-49459 | cure53 DOMPurify up to 3.4.5 sanitize root cross site scripting

July 15, 2026 Yanac

A vulnerability labeled as problematic has been found in cure53 DOMPurify up to 3.4.5. Affected is the function sanitize. The manipulation of the argument root results in cross site scripting.

This vulnerability was named CVE-2026-49459. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More