https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:55:46.320920+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-47344 CVE-2026-47344 — TYPO3 HTML Sanitizer allows Cross-Site Scripting 2026-10-07T16:55:46.322786+00:00

Affected: TYPO3 HTML Sanitizer

When ALLOW_INSECURE_RAW_TEXT is enabled, whitespace-variant closing tags (e.g., </style\t>) are not recognized by the sanitizer but accepted by browsers as valid end tags, allowing subsequent content to escape sanitization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.