What’s Vulnerable › Products

TYPO3 html-sanitizer vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your TYPO3 html-sanitizer version is affected

Latest TYPO3 html-sanitizer vulnerabilities

• CVE-2026-47345 — TYPO3 HTML Sanitizer allows Cross-Site Scripting (CVSS 5.1)
• CVE-2026-47344 — TYPO3 HTML Sanitizer allows Cross-Site Scripting (CVSS 2.1)
• CVE-2023-47125 — By-passing Cross-Site Scripting Protection in HTML Sanitizer (CVSS 6.1)
• CVE-2023-38500 — By-passing Cross-Site Scripting Protection in HTML Sanitizer (CVSS 6.1)
• CVE-2022-23499 — Cross-Site Scripting Protection bypass in HTML Sanitizer (CVSS 6.1)
• CVE-2022-36020 — Bypass of Cross-Site Scripting Protection in typo3/html-sanitizer (CVSS 6.1)