Description
html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.
Remediation
References
https://github.com/guardian/html-janitor/issues/34
https://hackerone.com/reports/308155
Related Vulnerabilities
CVE-2022-1243 Vulnerability in maven package org.webjars.bower:urijs
CVE-2023-46122 Vulnerability in maven package org.scala-sbt:io_2.12
CVE-2023-42794 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2020-7226 Vulnerability in maven package org.cryptacular:cryptacular
CVE-2023-31544 Vulnerability in maven package org.opencms:opencms-core