CVE-2018-3773 metascraper before v5.2.0 vulnerable to stored cross-site scripting
MediumCVSS 6.1
EPSS 0.93%
- Published
- Updated
- Exploit status
- No public exploit known
Description
There is a stored Cross-Site Scripting vulnerability in Open Graph meta properties read by the metascrape npm module <= 3.9.2.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm metascraper(npm) | < 5.2.0 | 5.2.0 |
| metascraper project metascraper | <= 3.9.2 | No fix listed |
| https://github.com/microlinkhq metascraper | = Not fixed | No fix listed |
References
- nvd.nist.gov third-party-advisory
- hackerone.com exploit third-party-advisory
- www.npmjs.com
- github.com patch
- github.com