Lucene search
Björn KimminichNODEJS:135HistoryAug 01, 2016 - 4:36 p.m.
Cross-Site Scripting
2016-08-0116:36:58
Björn Kimminich
www.npmjs.com
23
0.001 Low
EPSS
Percentile
48.5%
Overview
Affected versions of sanitize-html do not sanitize input recursively, which may allow an attacker to execute arbitrary Javascript.
Recommendation
Update to version 1.4.3 or later.
References
| CPE | Name | Operator | Version |
|---|---|---|---|
| sanitize-html | le | 1.4.2 |
Related
cve
cve
CVE-2016-1000237
2020-01-23 15:15:13
osv
osv
Cross-Site Scripting in sanitize-html
2020-04-16 03:14:47
cvelist
cvelist
CVE-2016-1000237
2020-01-23 14:21:28
prion
prion
Cross site scripting
2020-01-23 15:15:00
debiancve
debiancve
CVE-2016-1000237
2020-01-23 15:15:13
nvd
nvd
CVE-2016-1000237
2020-01-23 15:15:13
github
github
Cross-Site Scripting in sanitize-html
2020-04-16 03:14:47