← All advisories

Medium severity6.1NVD Advisory· Published Jun 4, 2018· Updated Jun 17, 2026

CVE-2017-0931

CVE-2017-0931

Description

html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
html-janitornpm	< 2.0.3	2.0.3

Affected products

3

HTML Janitor Project/HTML Janitor
cpe:2.3:a:html-janitor_project:html-janitor:2.0.2:*:*:*:*:node.js:*:*
ghsa-coords
pkg:npm/html-janitor
Range: < 2.0.3
HackerOne/html-janitor node modulev5
Range: All versions

Patches

Vulnerability mechanics

References

5

github.com/guardian/html-janitor/issues/34nvdExploitThird Party AdvisoryWEB
hackerone.com/reports/308155nvdExploitIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-hfj4-96f7-6r5gghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-0931ghsaADVISORY
www.npmjs.com/advisories/576ghsaWEB

News mentions

0

No linked articles in our index yet.