Description
pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | editor.md | 1.5.0 | — | GHSA-x65c-4fgj-5fc3 |
Medium · 6.1
CVE-2019-14653
EUVD-2019-0643GHSA-x65c-4fgj-5fc3
Cross-site Scripting in pandao
Published Aug 3, 2019 · Updated Aug 5, 2024 · Assigned by mitre