apostrophe (>=0.4.113, <=0.4.144), apostrophe-tumblr (>=0.5.1, <=0.5.13) +1 more potentially affected by CVE-2017-16017 via sanitize-html (>=0.1.4, <=1.1.4)

sanitize-html NPM version =0.1.4, =0.4.113, =0.5.1, =0.0.1, =0.2.3 Source cves: CVE-2017-16017 Source advisory: MEND:CVE-2017-16017...

apostrophe (>=0.4.113, <=0.5.299), apostrophe-tumblr (>=0.5.1, <=0.5.13) +6 more potentially affected by CVE-2017-16016 via sanitize-html (>=0.1.4, <=1.10.1)

sanitize-html NPM version =0.1.4, =0.4.113, =0.5.1, =0.1.0-beta.6, =0.0.1, =0.5.1, =0.0.1, =0.0.9 Source cves: CVE-2017-16016 Source advisory: MEND:CVE-2017-16016...

Cross site scripting

Cross-site scripting XSS vulnerability in the preview form in Stephen Ostermiller Contact Form before 2.00.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that contain an apostrophe...