2019-02-01 18:00:00
hackerone
PUBLISHED
A XSS vulnerability was found in html-page <=2.1.1 that allows malicious Javascript code to be executed in the users browser due to the absence of sanitization of the paths before rendering.