CVE-2017-0931

Description

html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.

Affected products

• HackerOne / html-janitor node moduleAll versions – All versions

References

• MISChttps://github.com/guardian/html-janitor/issues/34
• MISChttps://hackerone.com/reports/308155