Cross-Site Scripting in sanitize-html

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2016-1000237 · ADVISORY
• apostrophecms/sanitize-html · WEB
• punkave/sanitize-html · WEB
• apostrophecms/sanitize-html commit 762fbc7 · WEB
• raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2016/1000xxx/CVE-2016-1000237.json · WEB
• npmjs.com/advisories/135 · WEB
• nodesecurity.io/advisories/135 · Third Party Advisory

Lỗ hổng khác của sanitize-html

• CVE-2026-40186TRUNG BÌNH 6.1ApostropheCMS is an open-source Node.js content management system. A regression introduced in commit 49d0bb7, included in versions 2.17.1 of…
• CVE-2014-125128TRUNG BÌNH 6.1'sanitize-html' prior to version 1.0.3 is vulnerable to Cross-site Scripting (XSS). The function 'naughtyHref' doesn't properly validate the…
• CVE-2019-25225TRUNG BÌNH 6.1`sanitize-html` prior to version 2.0.0-beta is vulnerable to Cross-site Scripting (XSS). The `sanitizeHtml()` function in `index.js` does no…
• CVE-2024-21501TRUNG BÌNH 5.3Versions of the package sanitize-html before 2.12.1 are vulnerable to Information Exposure when used on the backend and with the style attri…
• CVE-2022-25887CAO 7.5The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular express…