description: A XSS vulnerability was found in html-page <=2.1.1 that allows malicious Javascript code to be executed in the user's browser due to the absence of sanitization of the paths before rendering.
problem types: Cross-site Scripting (XSS) - Generic (CWE-79)
affected:
{
product: html-pages
vendor: HackerOne
versions:
status: affected, version: <=2.1.1
}