Description
DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3.
Remediation
References
Related Vulnerabilities
WordPress Plugin TAuto Poster includes Backdoor [Only if downloaded via the vendor website] (1.4.5)
WordPress Plugin Meta Box-WordPress Custom Fields Framework Arbitrary File Upload (4.16.1)
WordPress 4.7.x Possible SQL Injection Vulnerability (4.7 - 4.7.6)
Oracle Application Server Other Vulnerability (CVE-2002-0840)