CVEs-PoC/2017/CVE-2017-0931.md

CVE-2017-0931

Description

html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.

POC

Reference

• https://github.com/guardian/html-janitor/issues/34
• https://github.com/guardian/html-janitor/issues/34
• https://hackerone.com/reports/308155
• https://hackerone.com/reports/308155

Github

• https://github.com/ossf-cve-benchmark/CVE-2017-0931