Sanitize-html cross-site scripting vulnerability (CNVD-2018-14553)

Sanitize-html is a tool for cleaning up user-submitted HTML. A cross-site scripting vulnerability exists in Sanitize-html 1.2.2 and earlier versions. A remote attacker can inject arbitrary web script or HTML by exploiting this vulnerability...