Cross site scripting

2009-09-2822:30:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.0%

JSON

Cross-site scripting (XSS) vulnerability in the live preview feature in the Markdown Preview module 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via “Markdown input.”

CPENameOperatorVersion
markdown_previeweq6.0.120

CPE	Name	Operator	Version
	markdown_preview	eq	6.0.120

References

www.securityfocus.com/bid/36505

drupal.org/node/585790