Skip to content
OpenAdvisories
Medium · 6.1 CVE-2018-3773 EUVD-2018-0381GHSA-8f64-q7jc-ccgp

metascraper before v5.2.0 vulnerable to stored cross-site scripting

Published Jul 30, 2018 · Updated Sep 16, 2024 · Assigned by hackerone

Vendor: https://github.com/microlinkhq Product: metascraper Package: metascraper Ecosystem: npm

Description

There is a stored Cross-Site Scripting vulnerability in Open Graph meta properties read by the `metascrape` npm module <= 3.9.2.

Affected products

VendorProductAffectedFixed
https://github.com/microlinkhq metascraper Not fixed —

Affected packages

EcosystemPackageAffectedFixedRecord
npm metascraper < 5.2.0 5.2.0 GHSA-8f64-q7jc-ccgp

References