Lucene search
_bayotopNODEJS:576HistoryApr 24, 2018 - 2:21 p.m.
Cross-Site Scripting
2018-04-2414:21:37
_bayotop
www.npmjs.com
13
0.001 Low
EPSS
Percentile
41.5%
Overview
Versions of html-janitor prior to 2.0.2 (all current versions) are vulnerable to cross-site scripting (XSS).
This is exploitable if user-controlled data is passed into the modules clean() function.
Recommendation
No fix is currently available for this vulnerability. It is recommended to use an alternative module for HTML sanitization.
References
| CPE | Name | Operator | Version |
|---|---|---|---|
| html-janitor | ge | 0.0.0 |
Related
cve
cve
CVE-2017-0931
2018-06-04 19:29:00
github
github
Cross-Site Scripting in html-janitor
2018-11-09 17:49:11
nvd
nvd
CVE-2017-0931
2018-06-04 19:29:00
osv
osv
Cross-Site Scripting in html-janitor
2018-11-09 17:49:11
CVE-2017-0931
2018-06-04 19:29:00
hackerone
hackerone
cvelist
cvelist
CVE-2017-0931
2018-04-26 00:00:00
prion
prion
Cross site scripting
2018-06-04 19:29:00