Description
html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.
Remediation
References
https://github.com/guardian/html-janitor/issues/34
https://hackerone.com/reports/308155
Related Vulnerabilities
CVE-2020-11022 Vulnerability in maven package org.fujion.webjars:jquery
CVE-2023-37954 Vulnerability in maven package com.sonyericsson.hudson.plugins.rebuild:rebuild
CVE-2018-14042 Vulnerability in maven package org.webjars:bootstrap
CVE-2021-43138 Vulnerability in maven package org.webjars.bower:async
CVE-2022-36915 Vulnerability in maven package org.jenkins-ci.plugins:android-signing