CVE-2016-9909
The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of the < (less than) character …
Published: 2017-02-22 · CVSS: Unscored
The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of the < (less than) character in attribute values.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7