CVE-2018-16481CWE-79

CVE-2018-16481: vulnerability in HackerOne html-pages

Published · Updated

Follow this CVE+ Monitor html-pages+ Monitor html-pages

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
A XSS vulnerability was found in html-page <=2.1.1 that allows malicious Javascript code to be executed in the user's browser due to the absence of sanitization of the paths before rendering.
Affected products
HackerOne · html-pages