Security Advisory
CVE-2013-7452
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via a crafted javascript URI.