CVE-2017-0931

Description (CNA)

html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.

Affected (CNA)

CWE

CWE-79

References

• https://github.com/guardian/html-janitor/issues/34
• https://hackerone.com/reports/308155

ADP enrichment