dompurify vulnerable to Cross-site Scripting

Published: Jan 11, 2023
Updated: Apr 14, 2023
GHSA: <a href="https://github.com/advisories/GHSA-h6p3-p4vx-wr8q" target="_blank" rel="noopener"> GHSA-h6p3-p4vx-wr8q
Severity: Medium
Exploit:

dompurify prior to version 2.2.3 is vulnerable to a cross-site scripting problem caused by nested headlines.