Lucene search
PangeacakeNODEJS:322HistoryMar 09, 2017 - 11:01 p.m.
HTML Injection
2017-03-0923:01:51
pangeacake
www.npmjs.com
55
0.001 Low
EPSS
Percentile
33.0%
Overview
Affected versions of shout do not escape the /topic command in messages, and are therefore vulnerable to cross-site scripting.
Recommendation
Update to version 0.50.0 or later.
References
| CPE | Name | Operator | Version |
|---|---|---|---|
| shout | ge | 0.44.0 <=0.49.3 |
Related
cvelist
cvelist
CVE-2017-16043
2018-04-26 00:00:00
nvd
nvd
CVE-2017-16043
2018-06-04 19:29:02
cve
cve
CVE-2017-16043
2018-06-04 19:29:02
github
github
HTML Injection in shout
2018-11-07 00:28:11
osv
osv
HTML Injection in shout
2018-11-07 00:28:11
CVE-2017-16043
2018-06-04 19:29:02
prion
prion
Command injection
2018-06-04 19:29:00