EPSS
Percentile
47.1%
node-json2html is vulnerable to Cross-Site scripting. The vulnerability exists in the _apply function in json2html.js for the text attribute which allows an attacker to inject and execute arbitrary JavaScript.
_apply
json2html.js
github.com/advisories/GHSA-79mp-cxp4-9p6r
github.com/moappi/json2html/commit/2d3d24d971b19a8ed1fb823596300b9835d55801
github.com/moappi/json2html/releases/tag/1.2.0
vuldb.com/?ctiid.216959
vuldb.com/?id.216959