Lucene search
GoogleOSV:GHSA-HFJ4-96F7-6R5GHistoryNov 09, 2018 - 5:49 p.m.
Cross-Site Scripting in html-janitor
2018-11-0917:49:11
Google
osv.dev
6
0.001 Low
EPSS
Percentile
41.5%
Versions of html-janitor prior to 2.0.2 (all current versions) are vulnerable to cross-site scripting (XSS).
This is exploitable if user-controlled data is passed into the modules clean() function.
Recommendation
No fix is currently available for this vulnerability. It is recommended to use an alternative module for HTML sanitization.
| CPE | Name | Operator | Version |
|---|---|---|---|
| html-janitor | lt | 2.0.3 |
Related
cve
cve
CVE-2017-0931
2018-06-04 19:29:00
github
github
Cross-Site Scripting in html-janitor
2018-11-09 17:49:11
osv
osv
CVE-2017-0931
2018-06-04 19:29:00
prion
prion
Cross site scripting
2018-06-04 19:29:00
hackerone
hackerone
nodejs
nodejs
Cross-Site Scripting
2018-04-24 14:21:37
cvelist
cvelist
CVE-2017-0931
2018-04-26 00:00:00
nvd
nvd
CVE-2017-0931
2018-06-04 19:29:00