Description
CodiMD 1.3.1, when Safari is used, allows XSS via an IFRAME element with allow-top-navigation in the sandbox attribute, in conjunction with a data: URL.
Unscored
CVE-2019-15499
EUVD-2019-6488GHSA-29jh-ww6h-mpqh
CodiMD 1.3.1, when Safari is used, allows XSS via an IFRAME element with allow-top-navigation in the sandbox attribute, in conjunction with…
Published Aug 23, 2019 · Updated Aug 5, 2024 · Assigned by mitre