Description
Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | editor.md | 1.5.0 | — | GHSA-2j5v-fc74-j9q2 |
Medium · 6.1
CVE-2019-9737
EUVD-2019-0368GHSA-2j5v-fc74-j9q2
Cross-Site Scripting in editor.md
Published Mar 13, 2019 · Updated Aug 4, 2024 · Assigned by mitre