Description
An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service (ReDOS) through stripping crafted HTML tags.
Remediation
References
Related Vulnerabilities
WordPress Plugin Woo Custom Checkout Field Multiple Vulnerabilities (1.3.2)
VirtueMart access control bypass
WordPress Plugin Poll, Survey, Questionnaire and Voting system SQL Injection (1.5.2)
Oracle Database Server CVE-2019-2749 Vulnerability (CVE-2019-2749)
PleskLin Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4878)