CVE-2014-9772

CVE-2014-9772

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via hex-encoded characters.

CVSS 6.1 · Medium · EPSS 2.6% · Fix available

Published

2017-01-23T21:00:00.000Z

Updated

2024-08-06T13:55:04.531Z

Stack: node

Check your server →