CVE-2014-125128 – Sanitize-HTML XSS Vulnerability

CVE ID : CVE-2014-125128

Published : Sept. 8, 2025, 10:09 a.m. | 44 minutes ago

Description : ‘sanitize-html’ prior to version 1.0.3 is vulnerable to Cross-site Scripting (XSS). The function ‘naughtyHref’ doesn’t properly validate the hyperreference (`href`) attribute in anchor tags (``), allowing bypasses that contain different casings, whitespace characters, or hexadecimal encodings.

Severity: 6.1 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…