CVE-2016-10006: XSS
In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impact is XSS.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10006?
CVE-2016-10006 is classified as a moderate severity vulnerability due to its potential to allow XSS attacks through the bypass of AntiSamy's protections.
How do I fix CVE-2016-10006?
The recommended fix for CVE-2016-10006 is to upgrade to AntiSamy version 1.5.5 or later.
What kind of vulnerability is CVE-2016-10006?
CVE-2016-10006 is a cross-site scripting (XSS) vulnerability that arises from the improper handling of specially crafted input.
What software is affected by CVE-2016-10006?
CVE-2016-10006 affects versions of AntiSamy prior to 1.5.5.
What happens if CVE-2016-10006 is exploited?
Exploitation of CVE-2016-10006 could allow an attacker to inject executable code into web pages, leading to XSS attacks.