Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Html-janitor Project records in CISA KEVNo Html-janitor Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 29
html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01046 · Published 2018-06-04 · Fixed in 2.0.3 CWE-79
Open these records in search →