description: In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option.
problem types: mutation XSS
affected:
{
product: Mozilla Bleach
vendor: n/a
versions:
status: affected, version: <=3.10
}