CVE-2017-0931

html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.

Score

CVSS 3.1 6.1 Medium

Status

Modified - support@hackerone.com

Published

2018-06-04

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Html-janitor Node Module (Hackerone)
• Html-janitor (Html-janitor Project)

References

• https://github.com/guardian/html-janitor/issues/34
• https://hackerone.com/reports/308155