CVE-2017-16017CWE-79

CVE-2017-16017: vulnerability in HackerOne sanitize-html node module

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
sanitize-html is a library for scrubbing html input for malicious values Versions 1.2.2 and below have a cross site scripting vulnerability.
Related CVEs — HackerOne sanitize-html node module

In the same product, most dangerous first.