Skip to content
OpenAdvisories

Package · npm

html-pages

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2018-16481

    Cross-Site Scripting in html-pages

    A XSS vulnerability was found in html-page <=2.1.1 that allows malicious Javascript code to be executed in the user's browser due to the absence of sanitization of the paths before rendering.

    HackerOne html-pages html-pages npm