Description
pandao Editor.md 1.5.0 has DOM XSS via input starting with a "<<" substring, which is mishandled during construction of an A element.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | editor.md | 1.5.0 | — | GHSA-x3g3-334f-q6h4 |
Medium · 6.1
CVE-2018-19056
EUVD-2018-0786GHSA-x3g3-334f-q6h4
Pandao editor.md vulnerable to DOM XSS
Published Nov 7, 2018 · Updated Aug 5, 2024 · Assigned by mitre