Lucene search
Veracode Vulnerability DatabaseVERACODE:5796HistoryFeb 07, 2018 - 2:15 a.m.
Cross-site Scripting (XSS)
2018-02-0702:15:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
29.7%
html-janitor is vulnerable to cross-site scripting (XSS) attacks. A malicious user can inject and execute arbitrary HTML through DOM clobbering.
| CPE | Name | Operator | Version |
|---|---|---|---|
| html-janitor | le | 2.0.2 | |
| html-janitor | le | 2.0.2 |
Related
cve
cve
CVE-2017-0928
2018-06-04 19:29:00
prion
prion
Hardcoded credentials
2018-06-04 19:29:00
osv
osv
Bypassing Sanitization using DOM clobbering in html-janitor
2018-07-24 20:06:17
CVE-2017-0928
2018-06-04 19:29:00
github
github
Bypassing Sanitization using DOM clobbering in html-janitor
2018-07-24 20:06:17
hackerone
hackerone
nvd
nvd
CVE-2017-0928
2018-06-04 19:29:00
nodejs
nodejs
Bypassing Sanitization using DOM clobbering
2018-04-20 21:37:50
cvelist
cvelist
CVE-2017-0928
2018-04-26 00:00:00