Lucene search
GoogleOSV:GHSA-5P26-HW7F-3CPRHistoryFeb 07, 2019 - 6:14 p.m.
Cross-Site Scripting in html-pages
2019-02-0718:14:44
Google
osv.dev
10
0.001 Low
EPSS
Percentile
37.5%
All versions of html-pages are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize folder names, allowing attackers to execute arbitrary JavaScript in the victim’s browser through folders with names containing malicious code.
Recommendation
No fix is currently available. Consider using an alternative package until a fix is made available.
| CPE | Name | Operator | Version |
|---|---|---|---|
| html-pages | le | 3.1.0 |
Related
veracode
veracode
Cross-site Scripting (XSS)
2019-02-04 00:54:49
nodejs
nodejs
Cross-Site Scripting
2019-06-19 14:48:11
prion
prion
Cross site scripting
2019-02-01 18:29:00
github
github
Cross-Site Scripting in html-pages
2019-02-07 18:14:44
hackerone
hackerone
cve
cve
CVE-2018-16481
2019-02-01 18:29:00
cvelist
cvelist
CVE-2018-16481
2019-02-01 18:00:00
nvd
nvd
CVE-2018-16481
2019-02-01 18:29:00