description: Cross-site scripting (XSS) vulnerability in min-http-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
problem types: Cross-site Scripting (XSS) - Stored (CWE-79)
affected:
{
product: min-http-server
vendor: min-http-server
versions:
status: affected, version: Not Fixed
}