Lucene search

K
osvGoogleOSV:GHSA-WG85-P6J7-GP3W
HistoryNov 21, 2018 - 10:21 p.m.

SimpleMDE XSS Vulnerability

2018-11-2122:21:25
Google
osv.dev
11

EPSS

0.001

Percentile

30.0%

SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via certain input with [ and ( characters, which is mishandled during construction of an A element.

EPSS

0.001

Percentile

30.0%

Related for OSV:GHSA-WG85-P6J7-GP3W