CVE Catalog
CVE-2023-3978
MediumCVSS 6.1Exploitation Probability (EPSS)
Elevated risk0.84%
53th percentile - higher than 53% of all known CVEs
Summary
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.
Risk Assessment
The organization may be exposed to XSS attacks, which could result in the theft of user data or session hijacking.
Recommendation
It is recommended to update components to the latest version to ensure correct rendering of text nodes and minimize the risk of XSS attacks.
Original NVD description (English source)
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.