WS-2017-0118 | Mend Vulnerability Database

Vulnerability DatabaseWS-2017-0118

WS-2017-0118

Published:May 14, 2026

Updated:May 14, 2026

Affected versions of the package are vulnerable to Mutation Cross-site Scripting (mXSS).

Affected Packages

angular (BOWER):

Affected version(s) =v1.3.17 <v1.3.18-build.129+sha.8bd59a5

Fix Suggestion:

Update to version v1.3.18-build.129+sha.8bd59a5

angular (BOWER):

Affected version(s) =v1.4.6 <v1.4.7-build.4242+sha.4dd10fd

Fix Suggestion:

Update to version v1.4.7-build.4242+sha.4dd10fd

angular (BOWER):

Affected version(s) =v1.4.5 <v1.4.6-build.4194+sha.170cd96

Fix Suggestion:

Update to version v1.4.6-build.4194+sha.170cd96

angular (BOWER):

Affected version(s) =v1.0.8 <v1.2.0-rc.1

Fix Suggestion:

Update to version v1.2.0-rc.1

angular (BOWER):

Affected version(s) =v1.4.14 <v1.5.0-beta.0

Fix Suggestion:

Update to version v1.5.0-beta.0

angular (BOWER):

Affected version(s) =v1.4.10 <v1.4.11

Fix Suggestion:

Update to version v1.4.11

angular (BOWER):

Affected version(s) =v1.2.29 <v1.2.30-build.604+sha.34e5623

Fix Suggestion:

Update to version v1.2.30-build.604+sha.34e5623

angular (BOWER):

Affected version(s) =v1.2.16 <v1.2.17-build.100+sha.feb54d6

Fix Suggestion:

Update to version v1.2.17-build.100+sha.feb54d6

angular (BOWER):

Affected version(s) =v1.4.3 <v1.4.4-build.4102+sha.528ceda

Fix Suggestion:

Update to version v1.4.4-build.4102+sha.528ceda

angular (BOWER):

Affected version(s) =v1.4.8 <v1.4.9-build.1+sha.7882c1c

Fix Suggestion:

Update to version v1.4.9-build.1+sha.7882c1c

angular (BOWER):

Affected version(s) =v1.0.6 <v1.0.7

Fix Suggestion:

Update to version v1.0.7

angular (BOWER):

Affected version(s) =v1.3.20 <v1.3.21-build.153+sha.a9ecde1

Fix Suggestion:

Update to version v1.3.21-build.153+sha.a9ecde1

angular (BOWER):

Affected version(s) =v1.3.15 <v1.3.16-build.100+sha.d5c99ea

Fix Suggestion:

Update to version v1.3.16-build.100+sha.d5c99ea

angular (BOWER):

Affected version(s) =v1.2.26 <v1.2.27-build.491+sha.07d6242

Fix Suggestion:

Update to version v1.2.27-build.491+sha.07d6242

angular (BOWER):

Affected version(s) >=v1.2.31 <v1.3.0-beta.1

Fix Suggestion:

Update to version v1.3.0-beta.1

angular (BOWER):

Affected version(s) =v1.3.9 <v1.3.10-build.17+sha.bf55d76

Fix Suggestion:

Update to version v1.3.10-build.17+sha.bf55d76

angular (BOWER):

Affected version(s) =v1.3.2 <v1.3.3-build.3534+sha.b6fd184

Fix Suggestion:

Update to version v1.3.3-build.3534+sha.b6fd184

angular (NPM):

Affected version(s) >=0.0.1-1 <1.5.1

Fix Suggestion:

Update to version 1.5.1

rota.spa (NUGET):

Affected version(s) >=1.0.0 <=1.5.6

Fix Suggestion:

Update to version no_fix

ionicvs2015 (NUGET):

Affected version(s) >=0.3.0 <=1.1.0

Fix Suggestion:

Update to version no_fix

mytestpackagedyrrahitis (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

westwind.globalization.web (NUGET):

Affected version(s) =2.0.60 <2.0.61

Fix Suggestion:

Update to version 2.0.61

angularjs (NUGET):

Affected version(s) >=1.3.1 <1.5.0

Fix Suggestion:

Update to version 1.5.0

consorzimvc (NUGET):

Affected version(s) =2.0.0

Fix Suggestion:

Update to version no_fix

iii.web.core (NUGET):

Affected version(s) >=1.0.0 <=1.0.7

Fix Suggestion:

Update to version no_fix

angularjs.sanitize (NUGET):

Affected version(s) >=1.2.27 <1.3.0-beta14

Fix Suggestion:

Update to version 1.3.0-beta14

ionic-framework-vs2015 (NUGET):

Affected version(s) >=0.1.0 <=0.2.0

Fix Suggestion:

Update to version no_fix

angularjstypescriptbase (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

westwind.globalization.web (NUGET):

Affected version(s) =2.0.4-beta1 <2.0.10-beta2

Fix Suggestion:

Update to version 2.0.10-beta2

fion.modelerp.core (NUGET):

Affected version(s) >=1.0.0 <1.0.344

Fix Suggestion:

Update to version 1.0.344

angularjs (NUGET):

Affected version(s) =1.2.10 <1.2.11

Fix Suggestion:

Update to version 1.2.11

aspspasilo-gh (NUGET):

Affected version(s) >=1.2.0 <=1.2.2

Fix Suggestion:

Update to version no_fix

westwind.globalization.web (NUGET):

Affected version(s) >=2.0.20-beta5 <2.0.50

Fix Suggestion:

Update to version 2.0.50

adjustmentapp (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

angularjs (NUGET):

Affected version(s) >=1.3.0-rc5 <1.3.0.10-beta

Fix Suggestion:

Update to version 1.3.0.10-beta

angularjs.sanitize (NUGET):

Affected version(s) >=1.3.0 <1.5.0

Fix Suggestion:

Update to version 1.5.0

vs2015.taco.angularoncordova.bootstrap (NUGET):

Affected version(s) =1.0.0 <1.0.1

Fix Suggestion:

Update to version 1.0.1

bike.net.modules.angular (NUGET):

Affected version(s) =0.0.0.8-alfa

Fix Suggestion:

Update to version no_fix

n2cms.management.nozip (NUGET):

Affected version(s) =2.8.0 <2.8.1

Fix Suggestion:

Update to version 2.8.1

crashdiag (NUGET):

Affected version(s) >=1.3.0.1 <=1.3.0.3

Fix Suggestion:

Update to version no_fix

angularjs (NUGET):

Affected version(s) >=1.2.27 <1.3.0-beta1

Fix Suggestion:

Update to version 1.3.0-beta1

crash.diagnoser (NUGET):

Affected version(s) =1.3.0.1

Fix Suggestion:

Update to version no_fix

angularjs.sanitize (NUGET):

Affected version(s) =1.2.10 <1.2.11

Fix Suggestion:

Update to version 1.2.11

westwind.globalization.web (NUGET):

Affected version(s) =2.2.0 <2.2.1

Fix Suggestion:

Update to version 2.2.1

claroline/front-end-bundle (PHP):

Affected version(s) =dev-7.x-test <7.0.1

Fix Suggestion:

Update to version 7.0.1

piwik/piwik (PHP):

Affected version(s) >=2.11.0-b4 <dev-3.x-dev

Fix Suggestion:

Update to version dev-3.x-dev

rogerclotet/angularjsbundle (PHP):

Affected version(s) =1.0.3 <1.0.4

Fix Suggestion:

Update to version 1.0.4

matomo/matomo (PHP):

Affected version(s) >=3.0.1 <3.1.1

Fix Suggestion:

Update to version 3.1.1

matomo/matomo (PHP):

Affected version(s) =dev-poc_manage_apps <dev-prefix-monolog-syslog

Fix Suggestion:

Update to version dev-prefix-monolog-syslog

coolops/web-app (PHP):

Affected version(s) >=3.2.0 <=3.2.2

Fix Suggestion:

Update to version no_fix

victoire/victoire (PHP):

Affected version(s) =dev-remove-swiftmailer-dependancy <dev-dependabot/npm_and_yarn/Bundle/UIBundle/Resources/config/marked-0.3.19

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/Bundle/UIBundle/Resources/config/marked-0.3.19

chayka/core-wpp (PHP):

Affected version(s) >=dev-dev <=dev-master

Fix Suggestion:

Update to version no_fix

sagsoz06/adminlte-theme (PHP):

Affected version(s) >=dev-master <=2.1.9

Fix Suggestion:

Update to version no_fix

piwik/piwik (PHP):

Affected version(s) >=2.11.0-rc1 <2.11.0-b2

Fix Suggestion:

Update to version 2.11.0-b2

newscoop/scoopwriter (PHP):

Affected version(s) =1.2.0 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

my-oos/my-oos (PHP):

Affected version(s) >=v2.0.36 <v2.0.56

Fix Suggestion:

Update to version v2.0.56

webkid/cms (PHP):

Affected version(s) >=0.1.0 <0.1.6

Fix Suggestion:

Update to version 0.1.6

innova/angular-js-bundle (PHP):

Affected version(s) =2.0.0 <2.0.1

Fix Suggestion:

Update to version 2.0.1

panda-coder/phpanda (PHP):

Affected version(s) =dev-master <dev-oldMaster

Fix Suggestion:

Update to version dev-oldMaster

singular/singular-project (PHP):

Affected version(s) =dev-1.x-dev <2.0.0

Fix Suggestion:

Update to version 2.0.0

acosf/archersys (PHP):

Affected version(s) >=dev-hdddwinstudent <1.0

Fix Suggestion:

Update to version 1.0

coolops/web-app (PHP):

Affected version(s) =dev-master <3.0.0-RC1

Fix Suggestion:

Update to version 3.0.0-RC1

newscoop/article-edit-screen (PHP):

Affected version(s) =1.2.0 <v1.2.0

Fix Suggestion:

Update to version v1.2.0

titan-framework/sample-travel (PHP):

Affected version(s) >=dev-master <=1.16.09-p5

Fix Suggestion:

Update to version no_fix

folivoro/layotter (PHP):

Affected version(s) >=dev-master <=v1.5.29

Fix Suggestion:

Update to version no_fix

siddthartha/yii2-angular (PHP):

Affected version(s) =1.0.0 <1.1

Fix Suggestion:

Update to version 1.1

someline/someline-starter (PHP):

Affected version(s) =dev-master <v0.0.1

Fix Suggestion:

Update to version v0.0.1

components/angular.js (PHP):

Affected version(s) =dev-master <1.2.0

Fix Suggestion:

Update to version 1.2.0

clh021/yii2-wechat_ionic1 (PHP):

Affected version(s) >=dev-master <=0.0.1

Fix Suggestion:

Update to version no_fix

vjcspy/izadmin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

newscoop/scoopwriter (PHP):

Affected version(s) =1.0.0-beta.11 <v1.0.0-beta.11

Fix Suggestion:

Update to version v1.0.0-beta.11

davbfr/cf (PHP):

Affected version(s) =2.6 <2.7

Fix Suggestion:

Update to version 2.7

innova/angularjs (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

newscoop/scoopwriter (PHP):

Affected version(s) =1.0.1 <v1.0.1

Fix Suggestion:

Update to version v1.0.1

matomo/matomo (PHP):

Affected version(s) >=2.15.1-b11 <dev-3.x-dev

Fix Suggestion:

Update to version dev-3.x-dev

chaplean/cms-bundle (PHP):

Affected version(s) >=dev-dev <=v8.0.3

Fix Suggestion:

Update to version no_fix

deesoft/yii2-angular (PHP):

Affected version(s) =1.0.0 <1.1

Fix Suggestion:

Update to version 1.1

newscoop/scoopwriter (PHP):

Affected version(s) >=1.0.0-beta.4 <v1.0.0

Fix Suggestion:

Update to version v1.0.0

icap/portfolio-bundle (PHP):

Affected version(s) >=v1.0.0 <4.0.0

Fix Suggestion:

Update to version 4.0.0

mpl/matomo (PHP):

Affected version(s) >=2.11.0 <3.1.1

Fix Suggestion:

Update to version 3.1.1

salimkamboh/yii2-angularjs (PHP):

Affected version(s) >=dev-main <=1.0

Fix Suggestion:

Update to version no_fix

piwik/piwik (PHP):

Affected version(s) =dev-poc_manage_apps <dev-prefix-monolog-syslog

Fix Suggestion:

Update to version dev-prefix-monolog-syslog

nehakadam/calenstyle (PHP):

Affected version(s) =2.0.7

Fix Suggestion:

Update to version no_fix

newscoop/article-edit-screen (PHP):

Affected version(s) =1.1.0 <v1.1

Fix Suggestion:

Update to version v1.1

matomo/matomo (PHP):

Affected version(s) >=2.11.0-b4 <2.15.1-b10

Fix Suggestion:

Update to version 2.15.1-b10

victoire/victoire (PHP):

Affected version(s) =2.2.x-dev <2.2.1

Fix Suggestion:

Update to version 2.2.1

xrow/xrowpiwik-ls (PHP):

Affected version(s) >=1.1 <1.3.0

Fix Suggestion:

Update to version 1.3.0

davbfr/cf (PHP):

Affected version(s) >=2.0 <2.5

Fix Suggestion:

Update to version 2.5

newscoop/article-edit-screen (PHP):

Affected version(s) =1.0.1 <v1.0.1

Fix Suggestion:

Update to version v1.0.1

boson/portal-bundle (PHP):

Affected version(s) =dev-b2.7

Fix Suggestion:

Update to version no_fix

newscoop/article-edit-screen (PHP):

Affected version(s) >=1.0.0-beta.4 <v1.0.0

Fix Suggestion:

Update to version v1.0.0

sunra/angularjs-symfony2-bundle (PHP):

Affected version(s) >=dev-master <=v1.5.5

Fix Suggestion:

Update to version no_fix

betteryourweb/laravel-custom (PHP):

Affected version(s) =dev-dev-master <dev-develop

Fix Suggestion:

Update to version dev-develop

hingst/layotter (PHP):

Affected version(s) >=dev-dev <=v1.5.27

Fix Suggestion:

Update to version no_fix

newscoop/article-edit-screen (PHP):

Affected version(s) =1.0.0-beta.11 <v1.0.0-beta.11

Fix Suggestion:

Update to version v1.0.0-beta.11

someline/someline-starter-app (PHP):

Affected version(s) >=dev-master <=v1.0.2

Fix Suggestion:

Update to version no_fix

betteryourweb/laravel-custom (PHP):

Affected version(s) =dev-master <v3.0.0-beta-2

Fix Suggestion:

Update to version v3.0.0-beta-2

innova/angular-js-bundle (PHP):

Affected version(s) >=5.0.0 <=5.1.0

Fix Suggestion:

Update to version no_fix

tortuvshin/bella.mn (PHP):

Affected version(s) >=dev-core <v1.0.0

Fix Suggestion:

Update to version v1.0.0

piwik/piwik (PHP):

Affected version(s) =dev-2.x-dev <dev-angular-migration2

Fix Suggestion:

Update to version dev-angular-migration2

matomo/matomo (PHP):

Affected version(s) >=2.11.0-rc1 <2.11.0-b2

Fix Suggestion:

Update to version 2.11.0-b2

singular/singular-project (PHP):

Affected version(s) >=v2.0 <dev-dev-2.1

Fix Suggestion:

Update to version dev-dev-2.1

ewinslow/elgg-evan (PHP):

Affected version(s) =dev-master <1.1

Fix Suggestion:

Update to version 1.1

claroline/front-end-bundle (PHP):

Affected version(s) =dev-master <dev-update_daterangepicker

Fix Suggestion:

Update to version dev-update_daterangepicker

piwik/piwik (PHP):

Affected version(s) >=3.0.1 <3.1.1

Fix Suggestion:

Update to version 3.1.1

opensmarty/opensmarty-starter (PHP):

Affected version(s) >=dev-master <=v1.0.0

Fix Suggestion:

Update to version no_fix

newscoop/scoopwriter (PHP):

Affected version(s) =1.1.0 <v1.1

Fix Suggestion:

Update to version v1.1

davbfr/cf (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

newscoop/scoopwriter (PHP):

Affected version(s) =dev-master <1.0.0-alpha1

Fix Suggestion:

Update to version 1.0.0-alpha1

aryaduta/metronic-bundle (PHP):

Affected version(s) =1.2.2

Fix Suggestion:

Update to version no_fix

newscoop/article-edit-screen (PHP):

Affected version(s) =dev-master <1.0.0-alpha1

Fix Suggestion:

Update to version 1.0.0-alpha1

matomo/matomo (PHP):

Affected version(s) =dev-2.x-dev <dev-angular-migration2

Fix Suggestion:

Update to version dev-angular-migration2

innova/angular-js-bundle (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

victoire/victoire (PHP):

Affected version(s) =dev-fix/translation <dev-master

Fix Suggestion:

Update to version dev-master

someline/someline-starter (PHP):

Affected version(s) =v0.8.2

Fix Suggestion:

Update to version no_fix

renatomefidf/sammui (PHP):

Affected version(s) >=v0.0.1 <v0.0.3

Fix Suggestion:

Update to version v0.0.3

Related Resources (2)

https://github.com/angular/angular.js/pull/12524

https://github.com/angular/angular.js/commit/bc0d8c4eea9a34bff5e29dd492dcdd668251be40

Do you need more information?

CVSS v4

Base Score:

6.9

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

NONE

Vulnerable System Confidentiality

LOW

Vulnerable System Integrity

NONE

Vulnerable System Availability

NONE

Subsequent System Confidentiality

LOW

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

5.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality

LOW

Integrity

NONE

Availability

NONE