Description
Forms is a library for easily creating HTML forms. Versions before 1.3.0 did not have proper html escaping. This means that if the application did not sanitize html on behalf of forms, use of forms may be vulnerable to cross site scripting
Remediation
References
https://github.com/caolan/forms/commit/bc01e534a0ff863dedb2026a50bd03153bbc6a5d
https://nodesecurity.io/advisories/158
Related Vulnerabilities
CVE-2023-41034 Vulnerability in maven package org.eclipse.leshan:leshan-core
CVE-2022-25872 Vulnerability in npm package fast-string-search
CVE-2021-21306 Vulnerability in maven package org.webjars.npm:marked
CVE-2012-4534 Vulnerability in maven package org.apache.tomcat:tomcat-coyote
CVE-2023-24998 Vulnerability in maven package commons-fileupload:commons-fileupload