WS-2017-0118 | Mend Vulnerability Database

Vulnerability DatabaseWS-2017-0118

WS-2017-0118

Published:May 19, 2026

Updated:May 19, 2026

Affected versions of the package are vulnerable to Mutation Cross-site Scripting (mXSS).

Affected Packages

angular (BOWER):

Affected version(s) =v1.2.29 <v1.2.30-build.604+sha.34e5623

Fix Suggestion:

Update to version v1.2.30-build.604+sha.34e5623

angular (BOWER):

Affected version(s) =v1.4.10 <v1.4.11

Fix Suggestion:

Update to version v1.4.11

angular (BOWER):

Affected version(s) =v1.3.20 <v1.3.21-build.153+sha.a9ecde1

Fix Suggestion:

Update to version v1.3.21-build.153+sha.a9ecde1

angular (BOWER):

Affected version(s) =v1.2.26 <v1.2.27-build.491+sha.07d6242

Fix Suggestion:

Update to version v1.2.27-build.491+sha.07d6242

angular (BOWER):

Affected version(s) =v1.2.16 <v1.2.17-build.100+sha.feb54d6

Fix Suggestion:

Update to version v1.2.17-build.100+sha.feb54d6

angular (BOWER):

Affected version(s) =v1.3.2 <v1.3.3-build.3534+sha.b6fd184

Fix Suggestion:

Update to version v1.3.3-build.3534+sha.b6fd184

angular (BOWER):

Affected version(s) =v1.3.17 <v1.3.18-build.129+sha.8bd59a5

Fix Suggestion:

Update to version v1.3.18-build.129+sha.8bd59a5

angular (BOWER):

Affected version(s) =v1.0.6 <v1.0.7

Fix Suggestion:

Update to version v1.0.7

angular (BOWER):

Affected version(s) =v1.3.15 <v1.3.16-build.100+sha.d5c99ea

Fix Suggestion:

Update to version v1.3.16-build.100+sha.d5c99ea

angular (BOWER):

Affected version(s) =v1.4.5 <v1.4.6-build.4194+sha.170cd96

Fix Suggestion:

Update to version v1.4.6-build.4194+sha.170cd96

angular (BOWER):

Affected version(s) =v1.0.8 <v1.2.0-rc.1

Fix Suggestion:

Update to version v1.2.0-rc.1

angular (BOWER):

Affected version(s) =v1.4.14 <v1.5.0-beta.0

Fix Suggestion:

Update to version v1.5.0-beta.0

angular (BOWER):

Affected version(s) =v1.4.8 <v1.4.9-build.1+sha.7882c1c

Fix Suggestion:

Update to version v1.4.9-build.1+sha.7882c1c

angular (BOWER):

Affected version(s) =v1.3.9 <v1.3.10-build.17+sha.bf55d76

Fix Suggestion:

Update to version v1.3.10-build.17+sha.bf55d76

angular (BOWER):

Affected version(s) =v1.4.3 <v1.4.4-build.4102+sha.528ceda

Fix Suggestion:

Update to version v1.4.4-build.4102+sha.528ceda

angular (BOWER):

Affected version(s) >=v1.2.31 <v1.3.0-beta.1

Fix Suggestion:

Update to version v1.3.0-beta.1

angular (BOWER):

Affected version(s) =v1.4.6 <v1.4.7-build.4242+sha.4dd10fd

Fix Suggestion:

Update to version v1.4.7-build.4242+sha.4dd10fd

angular (NPM):

Affected version(s) >=0.0.1-1 <1.5.1

Fix Suggestion:

Update to version 1.5.1

angularjs (NUGET):

Affected version(s) >=1.3.1 <1.5.0

Fix Suggestion:

Update to version 1.5.0

angularjs.sanitize (NUGET):

Affected version(s) =1.2.10 <1.2.11

Fix Suggestion:

Update to version 1.2.11

iii.web.core (NUGET):

Affected version(s) >=1.0.0 <=1.0.7

Fix Suggestion:

Update to version no_fix

angularjs (NUGET):

Affected version(s) =1.2.10 <1.2.11

Fix Suggestion:

Update to version 1.2.11

angularjs (NUGET):

Affected version(s) >=1.3.0-rc5 <1.3.0.10-beta

Fix Suggestion:

Update to version 1.3.0.10-beta

n2cms.management.nozip (NUGET):

Affected version(s) =2.8.0 <2.8.1

Fix Suggestion:

Update to version 2.8.1

angularjs.sanitize (NUGET):

Affected version(s) >=1.2.27 <1.3.0-beta14

Fix Suggestion:

Update to version 1.3.0-beta14

rota.spa (NUGET):

Affected version(s) >=1.0.0 <=1.5.6

Fix Suggestion:

Update to version no_fix

crashdiag (NUGET):

Affected version(s) >=1.3.0.1 <=1.3.0.3

Fix Suggestion:

Update to version no_fix

westwind.globalization.web (NUGET):

Affected version(s) =2.0.4-beta1 <2.0.10-beta2

Fix Suggestion:

Update to version 2.0.10-beta2

ionic-framework-vs2015 (NUGET):

Affected version(s) >=0.1.0 <=0.2.0

Fix Suggestion:

Update to version no_fix

mytestpackagedyrrahitis (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

angularjs.sanitize (NUGET):

Affected version(s) >=1.3.0 <1.5.0

Fix Suggestion:

Update to version 1.5.0

westwind.globalization.web (NUGET):

Affected version(s) =2.0.60 <2.0.61

Fix Suggestion:

Update to version 2.0.61

westwind.globalization.web (NUGET):

Affected version(s) =2.2.0 <2.2.1

Fix Suggestion:

Update to version 2.2.1

westwind.globalization.web (NUGET):

Affected version(s) >=2.0.20-beta5 <2.0.50

Fix Suggestion:

Update to version 2.0.50

consorzimvc (NUGET):

Affected version(s) =2.0.0

Fix Suggestion:

Update to version no_fix

aspspasilo-gh (NUGET):

Affected version(s) >=1.2.0 <=1.2.2

Fix Suggestion:

Update to version no_fix

crash.diagnoser (NUGET):

Affected version(s) =1.3.0.1

Fix Suggestion:

Update to version no_fix

adjustmentapp (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

angularjstypescriptbase (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

ionicvs2015 (NUGET):

Affected version(s) >=0.3.0 <=1.1.0

Fix Suggestion:

Update to version no_fix

angularjs (NUGET):

Affected version(s) >=1.2.27 <1.3.0-beta1

Fix Suggestion:

Update to version 1.3.0-beta1

fion.modelerp.core (NUGET):

Affected version(s) >=1.0.0 <1.0.344

Fix Suggestion:

Update to version 1.0.344

bike.net.modules.angular (NUGET):

Affected version(s) =0.0.0.8-alfa

Fix Suggestion:

Update to version no_fix

vs2015.taco.angularoncordova.bootstrap (NUGET):

Affected version(s) =1.0.0 <1.0.1

Fix Suggestion:

Update to version 1.0.1

newscoop/article-edit-screen (PHP):

Affected version(s) =1.0.1 <v1.0.1

Fix Suggestion:

Update to version v1.0.1

chaplean/cms-bundle (PHP):

Affected version(s) >=dev-dev <=v8.0.3

Fix Suggestion:

Update to version no_fix

newscoop/article-edit-screen (PHP):

Affected version(s) >=1.0.0-beta.4 <v1.0.0

Fix Suggestion:

Update to version v1.0.0

coolops/web-app (PHP):

Affected version(s) >=3.2.0 <=3.2.2

Fix Suggestion:

Update to version no_fix

chayka/core-wpp (PHP):

Affected version(s) >=dev-dev <=dev-master

Fix Suggestion:

Update to version no_fix

matomo/matomo (PHP):

Affected version(s) >=2.11.0-rc1 <2.11.0-b2

Fix Suggestion:

Update to version 2.11.0-b2

piwik/piwik (PHP):

Affected version(s) >=2.11.0-b4 <dev-3.x-dev

Fix Suggestion:

Update to version dev-3.x-dev

piwik/piwik (PHP):

Affected version(s) >=3.0.1 <3.1.1

Fix Suggestion:

Update to version 3.1.1

victoire/victoire (PHP):

Affected version(s) =2.2.x-dev <2.2.1

Fix Suggestion:

Update to version 2.2.1

tortuvshin/bella.mn (PHP):

Affected version(s) >=dev-core <v1.0.0

Fix Suggestion:

Update to version v1.0.0

innova/angularjs (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

innova/angular-js-bundle (PHP):

Affected version(s) >=5.0.0 <=5.1.0

Fix Suggestion:

Update to version no_fix

my-oos/my-oos (PHP):

Affected version(s) >=v2.0.36 <v2.0.56

Fix Suggestion:

Update to version v2.0.56

betteryourweb/laravel-custom (PHP):

Affected version(s) =dev-master <v3.0.0-beta-2

Fix Suggestion:

Update to version v3.0.0-beta-2

claroline/front-end-bundle (PHP):

Affected version(s) =dev-7.x-test <7.0.1

Fix Suggestion:

Update to version 7.0.1

icap/portfolio-bundle (PHP):

Affected version(s) >=v1.0.0 <4.0.0

Fix Suggestion:

Update to version 4.0.0

sunra/angularjs-symfony2-bundle (PHP):

Affected version(s) >=dev-master <=v1.5.5

Fix Suggestion:

Update to version no_fix

boson/portal-bundle (PHP):

Affected version(s) =dev-b2.7

Fix Suggestion:

Update to version no_fix

panda-coder/phpanda (PHP):

Affected version(s) =dev-master <dev-oldMaster

Fix Suggestion:

Update to version dev-oldMaster

hingst/layotter (PHP):

Affected version(s) >=dev-dev <=v1.5.27

Fix Suggestion:

Update to version no_fix

newscoop/scoopwriter (PHP):

Affected version(s) =1.0.0-beta.11 <v1.0.0-beta.11

Fix Suggestion:

Update to version v1.0.0-beta.11

claroline/front-end-bundle (PHP):

Affected version(s) =dev-master <dev-update_daterangepicker

Fix Suggestion:

Update to version dev-update_daterangepicker

singular/singular-project (PHP):

Affected version(s) >=v2.0 <dev-dev-2.1

Fix Suggestion:

Update to version dev-dev-2.1

mpl/matomo (PHP):

Affected version(s) >=2.11.0 <3.1.1

Fix Suggestion:

Update to version 3.1.1

victoire/victoire (PHP):

Affected version(s) =dev-remove-swiftmailer-dependancy <dev-dependabot/npm_and_yarn/Bundle/UIBundle/Resources/config/marked-0.3.19

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/Bundle/UIBundle/Resources/config/marked-0.3.19

victoire/victoire (PHP):

Affected version(s) =dev-fix/translation <dev-master

Fix Suggestion:

Update to version dev-master

someline/someline-starter (PHP):

Affected version(s) =dev-master <v0.0.1

Fix Suggestion:

Update to version v0.0.1

singular/singular-project (PHP):

Affected version(s) =dev-1.x-dev <2.0.0

Fix Suggestion:

Update to version 2.0.0

renatomefidf/sammui (PHP):

Affected version(s) >=v0.0.1 <v0.0.3

Fix Suggestion:

Update to version v0.0.3

davbfr/cf (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

matomo/matomo (PHP):

Affected version(s) >=2.11.0-b4 <2.15.1-b10

Fix Suggestion:

Update to version 2.15.1-b10

titan-framework/sample-travel (PHP):

Affected version(s) >=dev-master <=1.16.09-p5

Fix Suggestion:

Update to version no_fix

piwik/piwik (PHP):

Affected version(s) =dev-2.x-dev <dev-angular-migration2

Fix Suggestion:

Update to version dev-angular-migration2

salimkamboh/yii2-angularjs (PHP):

Affected version(s) >=dev-main <=1.0

Fix Suggestion:

Update to version no_fix

webkid/cms (PHP):

Affected version(s) >=0.1.0 <0.1.6

Fix Suggestion:

Update to version 0.1.6

rogerclotet/angularjsbundle (PHP):

Affected version(s) =1.0.3 <1.0.4

Fix Suggestion:

Update to version 1.0.4

someline/someline-starter (PHP):

Affected version(s) =v0.8.2

Fix Suggestion:

Update to version no_fix

innova/angular-js-bundle (PHP):

Affected version(s) =2.0.0 <2.0.1

Fix Suggestion:

Update to version 2.0.1

newscoop/article-edit-screen (PHP):

Affected version(s) =1.0.0-beta.11 <v1.0.0-beta.11

Fix Suggestion:

Update to version v1.0.0-beta.11

matomo/matomo (PHP):

Affected version(s) >=3.0.1 <3.1.1

Fix Suggestion:

Update to version 3.1.1

newscoop/scoopwriter (PHP):

Affected version(s) =1.1.0 <v1.1

Fix Suggestion:

Update to version v1.1

piwik/piwik (PHP):

Affected version(s) =dev-poc_manage_apps <dev-prefix-monolog-syslog

Fix Suggestion:

Update to version dev-prefix-monolog-syslog

newscoop/scoopwriter (PHP):

Affected version(s) =1.2.0 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

clh021/yii2-wechat_ionic1 (PHP):

Affected version(s) >=dev-master <=0.0.1

Fix Suggestion:

Update to version no_fix

someline/someline-starter-app (PHP):

Affected version(s) >=dev-master <=v1.0.2

Fix Suggestion:

Update to version no_fix

betteryourweb/laravel-custom (PHP):

Affected version(s) =dev-dev-master <dev-develop

Fix Suggestion:

Update to version dev-develop

piwik/piwik (PHP):

Affected version(s) >=2.11.0-rc1 <2.11.0-b2

Fix Suggestion:

Update to version 2.11.0-b2

newscoop/article-edit-screen (PHP):

Affected version(s) =1.2.0 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

nehakadam/calenstyle (PHP):

Affected version(s) =2.0.7

Fix Suggestion:

Update to version no_fix

newscoop/scoopwriter (PHP):

Affected version(s) >=1.0.0-beta.4 <v1.0.0

Fix Suggestion:

Update to version v1.0.0

davbfr/cf (PHP):

Affected version(s) =2.6 <2.7

Fix Suggestion:

Update to version 2.7

folivoro/layotter (PHP):

Affected version(s) >=dev-master <=v1.5.29

Fix Suggestion:

Update to version no_fix

matomo/matomo (PHP):

Affected version(s) >=2.15.1-b11 <dev-3.x-dev

Fix Suggestion:

Update to version dev-3.x-dev

aryaduta/metronic-bundle (PHP):

Affected version(s) =1.2.2

Fix Suggestion:

Update to version no_fix

newscoop/scoopwriter (PHP):

Affected version(s) =1.0.1 <v1.0.1

Fix Suggestion:

Update to version v1.0.1

components/angular.js (PHP):

Affected version(s) =dev-master <1.2.0

Fix Suggestion:

Update to version 1.2.0

acosf/archersys (PHP):

Affected version(s) >=dev-hdddwinstudent <1.0

Fix Suggestion:

Update to version 1.0

newscoop/article-edit-screen (PHP):

Affected version(s) =1.1.0 <v1.1

Fix Suggestion:

Update to version v1.1

newscoop/article-edit-screen (PHP):

Affected version(s) =dev-master <1.0.0-alpha1

Fix Suggestion:

Update to version 1.0.0-alpha1

newscoop/scoopwriter (PHP):

Affected version(s) =dev-master <1.0.0-alpha1

Fix Suggestion:

Update to version 1.0.0-alpha1

deesoft/yii2-angular (PHP):

Affected version(s) =1.0.0 <1.1

Fix Suggestion:

Update to version 1.1

davbfr/cf (PHP):

Affected version(s) >=2.0 <2.5

Fix Suggestion:

Update to version 2.5

matomo/matomo (PHP):

Affected version(s) =dev-poc_manage_apps <dev-prefix-monolog-syslog

Fix Suggestion:

Update to version dev-prefix-monolog-syslog

vjcspy/izadmin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

opensmarty/opensmarty-starter (PHP):

Affected version(s) >=dev-master <=v1.0.0

Fix Suggestion:

Update to version no_fix

innova/angular-js-bundle (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

ewinslow/elgg-evan (PHP):

Affected version(s) =dev-master <1.1

Fix Suggestion:

Update to version 1.1

siddthartha/yii2-angular (PHP):

Affected version(s) =1.0.0 <1.1

Fix Suggestion:

Update to version 1.1

sagsoz06/adminlte-theme (PHP):

Affected version(s) >=dev-master <=2.1.9

Fix Suggestion:

Update to version no_fix

xrow/xrowpiwik-ls (PHP):

Affected version(s) >=1.1 <1.3.0

Fix Suggestion:

Update to version 1.3.0

matomo/matomo (PHP):

Affected version(s) =dev-2.x-dev <dev-angular-migration2

Fix Suggestion:

Update to version dev-angular-migration2

coolops/web-app (PHP):

Affected version(s) =dev-master <3.0.0-RC1

Fix Suggestion:

Update to version 3.0.0-RC1

Related Resources (2)

https://github.com/angular/angular.js/pull/12524

https://github.com/angular/angular.js/commit/bc0d8c4eea9a34bff5e29dd492dcdd668251be40

Do you need more information?

CVSS v4

Base Score:

6.9

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

NONE

Vulnerable System Confidentiality

LOW

Vulnerable System Integrity

NONE

Vulnerable System Availability

NONE

Subsequent System Confidentiality

LOW

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

5.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality

LOW

Integrity

NONE

Availability

NONE