Description
angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "<option>" elements in "<select>" ones changes parsing behavior, leading to possibly unsanitizing code.
Remediation
References
Related Vulnerabilities
Grafana Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-27962)
MySQL CVE-2016-0667 Vulnerability (CVE-2016-0667)
Jboss EAP Improper Privilege Management Vulnerability (CVE-2019-14838)
phpMyAdmin Improper Authentication Vulnerability (CVE-2018-12613)
Oracle Application Server CVE-2007-3854 Vulnerability (CVE-2007-3854)