CVE-2024-48910

The repository provides a functional proof-of-concept for CVE-2024-48910, demonstrating a prototype pollution vulnerability in DOMPurify that allows bypassing XSS protections by manipulating `Object.prototype.hasOwnProperty` and `ALLOWED_ATTR`. The PoC includes executable JavaScript code that exploits the vulnerability to achieve XSS.

This repository contains a functional proof-of-concept for CVE-2024-48910, demonstrating a prototype pollution vulnerability in a Node.js server. The exploit leverages unsafe object merging to manipulate `Object.prototype`, which can lead to arbitrary code execution in client-side JavaScript.