Skip to content
OpenAdvisories

Archive

27 January 2015

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium —

    VBScript Content Injection in marked

    Incomplete blacklist vulnerability in marked 0.3.2 and earlier for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks via a vbscript tag in a link.