[MEDIUM] HTML Purifier allows remote attackers to obtain sensitive information

PKSA-bscq-3hjz-7cqm CVE-2011-3744 GHSA-jw86-5cjf-mv79

Affected version: <=4.2.0

Reported by:
GitHub

[MEDIUM] HTML Purifier Cross-site Scripting vulnerability

PKSA-393x-4q3x-x5sn CVE-2007-3498 GHSA-6fh7-fwqj-mv49

Affected version: <2.0.1

Reported by:
GitHub

[MEDIUM] XSS vulnerability exploitable on Internet Explorer

PKSA-mxmm-yhr7-jf8c CVE-2010-2479 GHSA-6rm6-mjmh-86jq

Affected version: <4.1.1

Reported by:
FriendsOfPHP/security-advisories, GitHub

[MEDIUM] Multiple XSS vulnerabilities exploitable on Internet Explorer

PKSA-dcn7-gtzn-nbj6 CVE-2010-4183 GHSA-3p68-m5qw-9g9w

Affected version: <4.1.0

Reported by:
FriendsOfPHP/security-advisories, GitHub