GrepRules
Sign inPublish rule
Explore/cve-2026-47345-html5-php-outputrules-missing-namespaceattrs

CVE-2026-47345: Html5 Php Outputrules Missing Namespaceattrs

Classes extending `Masterminds\HTML5\Serializer\OutputRules` but failing to override `namespaceAttrs` may serialize namespace attributes (like `xmlns:*`) directly to the output without context-aware HTML encoding. If this class is used within an HTML sanitization mechanism, this omission can lead to Cross-Site Scripting (XSS) via maliciously crafted namespac

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0PHPβ
greprules fetch cve-2026-47345-html5-php-outputrules-missing-namespaceattrs --engine opengrep

Description

Classes extending `Masterminds\HTML5\Serializer\OutputRules` but failing to override `namespaceAttrs` may serialize namespace attributes (like `xmlns:*`) directly to the output without context-aware HTML encoding. If this class is used within an HTML sanitization mechanism, this omission can lead to Cross-Site Scripting (XSS) via maliciously crafted namespac

License
Apache-2.0
Source context
Public repository
Source
Provally CVE rule catalog
Validation status
Verified
Quality signals
145 downloads0 direct145 via packs
· 0 stars · Quality score 80How quality works
Included packs
2 packs