CVE-2017-0931

Description

html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/guardian/html-janitor/issues/34 ↗
• https://hackerone.com/reports/308155 ↗