CVE-2017-0931 Cross-Site Scripting in html-janitor
MediumCVSS 6.1
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm html-janitor(npm) | < 2.0.3 | 2.0.3 |
| html-janitor project html-janitor | = 2.0.2 | No fix listed |
| HackerOne html-janitor node module | = All versions | No fix listed |
References
- nvd.nist.gov third-party-advisory
- github.com exploit third-party-advisory
- hackerone.com exploit issue-tracking third-party-advisory
- github.com
- www.npmjs.com