CVE-2017-16016CWE-79

CVE-2017-16016: vulnerability in HackerOne sanitize-html node module

Published · Updated

Follow this CVE+ Monitor sanitize-html node module+ Monitor sanitize-html

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
Sanitize-html is a library for scrubbing html input of malicious values. Versions 1.11.1 and below are vulnerable to cross site scripting (XSS) in certain scenarios: If allowed at least one nonTextTags, the result is a potential XSS vulnerability.
Affected products
HackerOne · sanitize-html node module
Related CVEs — HackerOne sanitize-html node module

In the same product, most dangerous first.

CVE-2017-16017—CVE-2017-16017EPSS 1.2%