Lucene search

K
osvGoogleOSV:GHSA-2J5V-FC74-J9Q2
HistoryMar 14, 2019 - 3:38 p.m.

Cross-Site Scripting in editor.md

2019-03-1415:38:56
Google
osv.dev
5

EPSS

0.001

Percentile

37.3%

All versions of editor.md are vulnerable to Cross-Site Scripting. User input is insufficiently sanitized, allowing attackers to inject malicious code in payloads containing base64-encoded content.

Recommendation

No fix is currently available. Consider using an alternative module until a fix is made available.

EPSS

0.001

Percentile

37.3%

Related for OSV:GHSA-2J5V-FC74-J9Q2