CVE-2026-75838 | cure53 DOMPurify up to 3.4.12 IN_PLACE sanitization cross site scripting

A vulnerability was found in cure53 DOMPurify up to 3.4.12. It has been classified as problematic. Affected by this issue is some unknown functionality of the component IN_PLACE sanitization. Performing a manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-75838. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More