CVE-2013-7454

CVE-2013-7454

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via nested forbidden strings.

CVSS 6.1 · Medium · EPSS 1.8% · Fix available

Published

2017-01-23T21:00:00.000Z

Updated

2024-08-06T18:09:16.091Z

Stack: node

Check your server →