Complimentary 90-day, on-prem license available for entities involved in Covid19 response.
Out-of-date Version (DOMPurify)
Severity: Information
Summary
Netsparker identified the target web site is using DOMPurify and detected that it is out of date. DOMPurify is a XSS sanitizer library for HTML, MathML and SVG.
Impact
Since this is an old version of the software, it may be vulnerable to attacks.
Remediation
Please upgrade your installation of DOMPurify to the latest stable version.
Classifications
PCI v3.1-6.2, PCI v3.2-6.2, CAPEC-310, CWE-829, HIPAA-829, ISO27001-A.14.1.2, OWASP PC-C1, OWASP 2013-A9, OWASP 2017-A9
Netsparker Security Insights
Helpful Use Cases
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
Tags
