CVE-2026-66370 | rrrene html_sanitize_ex prior 1.5.3 HTML5 Scrubber formaction redirect

August 6, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in rrrene html_sanitize_ex. Affected by this vulnerability is an unknown functionality of the component HTML5 Scrubber. The manipulation of the argument formaction leads to open redirect.

This vulnerability is traded as CVE-2026-66370. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More