Login Request a demo
HS
Product
HTML Sanitizer
by TYPO3 · last CVE Jun 8, 2026
6
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 0Medium 5Low 1
Severity
All severities6Critical0High0Medium5Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add HTML Sanitizer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-47125
6.1
1%
Nov 14
TYPO3 is an open source PHP based web content management system released under the GNU GPL
Affected: 1.0.0 before 1.5.3; 2.0.0 before 2.1.4
CVE-2023-38500
6.1
1%
Jul 25
TYPO3 HTML Sanitizer is an HTML sanitizer, written in PHP, aiming to provide cross-site-scripting-safe markup based on explicitly allowed tags, attributes and values
Affected: 1.0.0 before 1.5.1; 2.0.0 before 2.1.2
CVE-2022-23499
6.1
0%
Dec 13
HTML sanitizer is written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values
Affected: 1.0.0 through 1.0.7; 2.0.0 before 2.1.1
CVE-2022-36020
6.1
1%
Sep 13
The typo3/html-sanitizer package is an HTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values
Affected: 1.0.0 before 1.0.7; 2.0.0 before 2.0.16
CVE-2026-47345
5.1
0%
Jun 8
TYPO3 HTML Sanitizer allows Cross-Site Scripting
Affected: before 2.3.2
CVE-2026-47344
2.1
0%
Jun 8
TYPO3 HTML Sanitizer allows Cross-Site Scripting
Affected: before 2.3.2
Showing 6