Description
A XSS vulnerability was found in html-page <=2.1.1 that allows malicious Javascript code to be executed in the user's browser due to the absence of sanitization of the paths before rendering.
Remediation
References
https://hackerone.com/reports/330356
Related Vulnerabilities
CVE-2022-33987 Vulnerability in maven package org.webjars.npm:got
CVE-2023-30532 Vulnerability in maven package org.jenkinsci.plugins.spoonscript:spoonscript
CVE-2018-19838 Vulnerability in maven package org.webjars.npm:node-sass
CVE-2020-7625 Vulnerability in npm package op-browser
CVE-2021-29442 Vulnerability in maven package com.alibaba.nacos:nacos-common