A vulnerability was found in cure53 DOMPurify up to 3.3.1 and classified as problematic. Impacted is an unknown function. The manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-65912. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.