medium6.1
CVE-2013-7454
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via nested forbidden strings.
Impact
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via nested forbidden strings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nodejs | Node.Js | through 1.0.4 |