CVE-2026-61784 | cstigler node-xhtml-purifier up to 0.4.2 Attribute Serialization XHTMLPurifier.js attributeString cross site scripting

A vulnerability was found in cstigler node-xhtml-purifier up to 0.4.2. It has been classified as problematic. The affected element is the function attributeString of the file XHTMLPurifier.js of the component Attribute Serialization. Performing a manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-61784. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More