2 matches found
Cross site scripting
pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element...
CVE-2019-14653: Improper Neutralization of Input During Web Page Generation