Unscored CVE-2020-8548 EUVD-2020-29414GHSA-w333-hr2m-g7q9

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreference…

Published Feb 3, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).

References

https://github.com/antonreshetov/massCode/issues/44
https://github.com/antonreshetov/massCode/issues/43