medium6.1
CVE-2014-9772
The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via hex-encoded characters.
Impact
The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via hex-encoded characters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nodejs | Node.Js | through 1.8.4 |