CVE-2018-16480

A XSS vulnerability was found in module public <0.1.4 that allows malicious Javascript code to run in the browser, due to the absence of sanitization of the file/folder names before rendering.

Score

CVSS 3.0 6.1 Medium

Status

Modified - support@hackerone.com

Published

2019-02-01

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Public (Hackerone)
• Public (Public Project)

References

• https://hackerone.com/reports/329950
• https://www.npmjs.com/package/public