CVE-2026-47423
published 2026-07-14CVE-2026-47423: DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. In 3.4.4, DOMPurify allowed selectedcontent by default, allowing browsers to…
PriorityP335high8.2CVSS 3.1
AVNACLPRNUIRSCCHILAN
EPSS
0.27%
19.0th percentile
DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. In 3.4.4, DOMPurify allowed selectedcontent by default, allowing browsers to re-clone an XSS payload after sanitization so that unsanitized markup inside is returned. This issue is fixed in version 3.4.5.
Affected
37 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| advanced-cluster-security | rhacs-main-rhel8 | — | — |
| advanced-cluster-security | rhacs-main-rhel9 | — | — |
| ansible-automation-platform-26 | gateway-rhel9 | — | — |
| ansible-automation-platform-27 | gateway-rhel9 | — | — |
| ansible-automation-platform | automation-portal | — | — |
| container-native-virtualization | kubevirt-console-plugin | — | — |
| container-native-virtualization | kubevirt-console-plugin-rhel9 | — | — |
| cure53 | dompurify | — | — |
| cure53 | dompurify | — | — |
| cure53 | dompurify | — | — |
| cure53 | dompurify | >= 3.4.4 < 3.4.5 | 3.4.5 |
| devspaces | code-rhel9 | — | — |
| devspaces | openvsx-rhel9 | — | — |
| migration-toolkit-virtualization | mtv-console-plugin-rhel9 | — | — |
| multicluster-engine | console-mce-rhel9 | — | — |
| odf4 | ocs-client-console-rhel9 | — | — |
| odf4 | odf-console-rhel9 | — | — |
| odf4 | odf-multicluster-console-rhel9 | — | — |
| openshift-gitops-1 | argocd-rhel8 | — | — |
| openshift-gitops-1 | argocd-rhel9 | — | — |
| openshift-lightspeed | lightspeed-agentic-console-rhel9 | — | — |
| openshift-lightspeed | lightspeed-console-plugin-419-rhel9 | — | — |
| openshift-lightspeed | lightspeed-console-plugin-pf5-rhel9 | — | — |
| openshift-lightspeed | lightspeed-console-plugin-rhel9 | — | — |
| openshift-service-mesh | kiali-ossmc-rhel9 | — | — |
CVSS provenance
nvdv3.18.2HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
vendor_redhat8.2HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
DOMPurify XSS via selectedcontent re-clone
ghsa·2026-06-01
CVE-2026-47423 [HIGH] CWE-79 DOMPurify XSS via selectedcontent re-clone
DOMPurify XSS via selectedcontent re-clone
### Summary
DOMPurify 3.4.4 allows `selectedcontent` by default, allowing a chain in which browsers "re-clone" an XSS payload after sanitization, effectively bypassing DOMPurify.
### Details
The chain is as follows:
1. The browser parses the input and creates a `` clone from the selected ``
2. DOMPurify walks and sanitizes that generated clone.
3. DOMPurify reaches the original `` and removes `selected=javascript:1`
4. The browser refreshes the `` clone from the original `option`'s content.
5. The refreshed clone is in a subtree DOMPurify already walked, which DOMPurify doesn't go back to sanitize
6. The returned string contains unsanitized markup inside ``.
### PoC
```js
const dirty =
'' +
'' +
'x' +
'';
const clean = DOMPurify.sanitize(dirty
Red Hat
dompurify: DOMPurify: Cross-site scripting vulnerability allows information disclosure
vendor_redhat·2026-07-14·CVSS 8.2
CVE-2026-47423 [HIGH] CWE-79 dompurify: DOMPurify: Cross-site scripting vulnerability allows information disclosure
dompurify: DOMPurify: Cross-site scripting vulnerability allows information disclosure
A flaw was found in DOMPurify, a DOM-only cross-site scripting (XSS) sanitizer. Due to the default allowance of `selectedcontent`, a remote attacker could craft a malicious payload that, after initial sanitization, could be re-cloned by browsers, leading to the execution of unsanitized markup. This could result in information disclosure.
Statement: This is an Important cross-site scripting (XSS) vulnerability in DOMPurify, a sanitizer for HTML, MathML, and SVG. The flaw allows a remote attacker to bypass sanitization by crafting a malicious payload that leverages the default allowance of `selectedcontent`. This can lead to browsers re-cloning the payload and executing unsanitized markup, resulting in i
No detection rules found.
No public exploits indexed.
2026-07-14
Published