CVE-2026-109344 | cure53 DOMPurify up to 3.4.15 In Place Mode afterSanitizeElements cross site scripting

October 12, 2026 Yanac

A vulnerability labeled as problematic has been found in cure53 DOMPurify up to 3.4.15. This issue affects the function afterSanitizeElements of the component In Place Mode. The manipulation results in cross site scripting.

This vulnerability was named CVE-2026-109344. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More