Vulnerabilities > Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

DATE CVE VULNERABILITY TITLE RISK
2018-06-04 CVE-2017-16022 Cross-site Scripting vulnerability in Morris.Js Project Morris.Js 0.5.0
Morris.js creates an svg graph, with labels that appear when hovering over a point.
network
low complexity
morris-js-project CWE-79
6.1
2018-06-04 CVE-2017-16019 Cross-site Scripting vulnerability in Gitbook 2.6.8/2.6.9
GitBook is a command line tool (and Node.js library) for building beautiful books using GitHub/Git and Markdown (or AsciiDoc).
network
low complexity
gitbook CWE-79
6.1
2018-06-04 CVE-2017-16018 Cross-site Scripting vulnerability in Restify
Restify is a framework for building REST APIs.
network
low complexity
restify CWE-79
6.1
2018-06-04 CVE-2017-16017 Cross-site Scripting vulnerability in Punkave Sanitize-Html
sanitize-html is a library for scrubbing html input for malicious values Versions 1.2.2 and below have a cross site scripting vulnerability.
network
low complexity
punkave CWE-79
6.1
2018-06-04 CVE-2017-16016 Cross-site Scripting vulnerability in Punkave Sanitize-Html
Sanitize-html is a library for scrubbing html input of malicious values.
network
low complexity
punkave CWE-79
6.1
2018-06-04 CVE-2017-16015 Cross-site Scripting vulnerability in Forms Project Forms
Forms is a library for easily creating HTML forms.
network
low complexity
forms-project CWE-79
6.1
2018-06-04 CVE-2017-16009 Cross-site Scripting vulnerability in Ag-Grid
ag-grid is an advanced data grid that is library agnostic.
network
low complexity
ag-grid CWE-79
6.1
2018-06-04 CVE-2017-16008 Cross-site Scripting vulnerability in I18Next
i18next is a language translation framework.
network
low complexity
i18next CWE-79
6.1
2018-06-04 CVE-2017-16006 Cross-site Scripting vulnerability in Remarkable Project Remarkable
Remarkable is a markdown parser.
network
low complexity
remarkable-project CWE-79
6.1
2018-06-04 CVE-2017-0931 Cross-site Scripting vulnerability in Html-Janitor Project Html-Janitor 2.0.2
html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.
network
low complexity
html-janitor-project CWE-79
6.1