← All advisories

Medium severity6.1NVD Advisory· Published Jan 23, 2017· Updated Jun 17, 2026

CVE-2013-7454

CVE-2013-7454

Description

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via nested forbidden strings.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
validatornpm	< 1.1.0	1.1.0

Affected products

2

Node.js/Node.js
cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*
Range: <=1.0.4
ghsa-coords
pkg:npm/validator
Range: < 1.1.0

Patches

Vulnerability mechanics

References

7

www.openwall.com/lists/oss-security/2016/04/20/11nvdMailing ListThird Party AdvisoryWEB
github.com/advisories/GHSA-q4qq-fm7q-cwp5ghsaADVISORY
nodesecurity.io/advisories/41nvdMitigationVendor Advisory
nvd.nist.gov/vuln/detail/CVE-2013-7454ghsaADVISORY
blog.kotowicz.net/2012/07/codeigniter-210-xssclean-cross-site.htmlghsaWEB
nealpoole.com/blog/2013/07/xss-filter-bypass-in-validator-nodejs-moduleghsaWEB
www.npmjs.com/advisories/41ghsaWEB

News mentions

0

No linked articles in our index yet.