CVE-2018-16481

A XSS vulnerability was found in html-page <=2.1.1 that allows malicious Javascript code to be executed in the user's browser due to the absence of sanitization of the paths before rendering.

Score

CVSS 3.0 6.1 Medium

Status

Modified - support@hackerone.com

Published

2019-02-01

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Html-pages (Hackerone)
• Html-pages (Html-pages Project)

References

• https://hackerone.com/reports/330356