0.001 Low
EPSS
Percentile
28.0%
pandao Editor.md 1.5.0 has DOM XSS via input starting with a << substring, which is mishandled during construction of an A element.
<<
A
github.com/advisories/GHSA-x3g3-334f-q6h4
github.com/pandao/editor.md
github.com/pandao/editor.md/issues/634
nvd.nist.gov/vuln/detail/CVE-2018-19056