Skip to content
OpenAdvisories

Package · npm

html-pages

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.1
    CVE-2018-16481

    Cross-Site Scripting in html-pages

    A XSS vulnerability was found in html-page <=2.1.1 that allows malicious Javascript code to be executed in the user's browser due to the absence of sanitization of the paths before rendering.

    HackerOne html-pages html-pages npm
  • Critical 9.8
    CVE-2018-3744

    Path Traversal in html-pages

    The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.

    HackerOne html-pages node module html-pages npm