Description
pandao Editor.md 1.5.0 allows XSS via the Javascript: string.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | editor.md | 1.5.0 | — | GHSA-5q54-8p9j-x74j |
Medium · 6.1
CVE-2019-14517
EUVD-2019-0621GHSA-5q54-8p9j-x74j
Cross-site Scripting in pandao editor.md
Published Aug 1, 2019 · Updated Aug 5, 2024 · Assigned by mitre