Files
CVEs-PoC/2020/CVE-2020-7676.md
T
2024-05-25 21:48:12 +02:00

736 B

CVE-2020-7676

Description

angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "" elements in "" ones changes parsing behavior, leading to possibly unsanitizing code. POC Reference No PoCs from references. Github https://github.com/ossf-cve-benchmark/CVE-2020-7676