2017-09-25 21:00:00
mitre
PUBLISHED
OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL.