EPSS
Percentile
37.2%
An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file.
github.com/advisories/GHSA-hhrp-qm88-xjr3
github.com/xCss/Valine
github.com/xCss/Valine/commit/32d4d5e68df804f0eabb1a2bebbbf9459e31c2b7
github.com/xCss/Valine/issues/127
nvd.nist.gov/vuln/detail/CVE-2018-19289