CVE-2017-1000188

Published
View on NVD ↗
CVSS v3
N/A
CVSS v2
4.3
MEDIUM
Affected
1
PROJECT

Description

nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection

mde/ejs
mde/ejs
Embedded JavaScript templates -- http://ejs.co
GitHubGitHub
8.11K