html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.
{
"cpe": "cpe:2.3:a:html-janitor_project:html-janitor:2.0.2:*:*:*:*:node.js:*:*",
"source": "CPE_STRING",
"extracted_events": [
{
"introduced": "2.0.2"
},
{
"last_affected": "2.0.2"
}
]
}