← CVE Intelligence

CVE-2018-16481

HackerOne / html-pages PUBLISHED

Description (CNA)

A XSS vulnerability was found in html-page <=2.1.1 that allows malicious Javascript code to be executed in the user's browser due to the absence of sanitization of the paths before rendering.

Affected (CNA)

Vendor / productVersions
HackerOne / html-pagesaffected <=2.1.1

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.