Medium severity6.1NVD Advisory· Published Dec 24, 2016· Updated Jun 17, 2026

CVE-2016-10006

Description

In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impact is XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.owasp.antisamy:antisamyMaven	< 1.5.5	1.5.5

Affected products

ghsa-coords
pkg:maven/org.owasp.antisamy/antisamy
Range: < 1.5.5
Antisamy Project/Antisamy
cpe:2.3:a:antisamy_project:antisamy:*:*:*:*:*:*:*:*
Range: <1.5.5

Patches

Vulnerability mechanics

References

github.com/nahsra/antisamy/issues/2nvdPatchVendor AdvisoryWEB
www.securityfocus.com/bid/95101nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1037532nvdThird Party AdvisoryVDB Entry
github.com/advisories/GHSA-683w-6h9j-57wqghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2016-10006ghsaADVISORY
web.archive.org/web/20170214025813/http://www.securityfocus.com/bid/95101ghsaWEB
web.archive.org/web/20201207192053/http://www.securitytracker.com/id/1037532ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000