CVE-2020-28459

🗓️ 25 Jul 2022 14:05:43Reported by snykType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 46 Views

CVE-2020-28459 affects markdown-it-decorate with event handler vulnerability

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2020-28459	25 Jul 202218:33	–	circl
CNNVD	markdown-it-decorate 跨站脚本漏洞	25 Jul 202200:00	–	cnnvd
Cvelist	CVE-2020-28459 Cross-site Scripting (XSS)	25 Jul 202214:05	–	cvelist
EUVD	EUVD-2022-6409	3 Oct 202520:07	–	euvd
Github Security Blog	markdown-it-decorate vulnerable to cross-site scripting (XSS)	19 Jul 202214:16	–	github
NVD	CVE-2020-28459	25 Jul 202214:15	–	nvd
OSV	GHSA-RHF5-2378-3W3W markdown-it-decorate vulnerable to cross-site scripting (XSS)	19 Jul 202214:16	–	osv
Prion	Code injection	25 Jul 202214:15	–	prion
Positive Technologies	PT-2022-8902 · Npm · Markdown-It-Decorate	19 Jul 202200:00	–	ptsecurity
Snyk	Cross-site Scripting (XSS)	24 Nov 202013:05	–	snyk

NVD

Node

markdown-it-decorate_project markdown-it-decoratenode.js

[
  {
    "product": "markdown-it-decorate",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]