CVE-2025-26791 | Cure53 DOMPurify up to 3.2.3 cross site scripting (EUVD-2025-4245 / Nessus ID 232781)
A vulnerability marked as problematic has been reported in Cure53 DOMPurify up to 3.2.3. Impacted is an unknown function. The manipulation leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2025-26791. The attack is possible to be carried out remotely. No exploit exists.
It is suggested to upgrade the affected component.