Cross site scripting

Cross-site scripting XSS vulnerability in the live preview feature in the Markdown Preview module 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via "Markdown input."...

CVE-2009-3437

Cross-site scripting XSS vulnerability in the live preview feature in the Markdown Preview module 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via "Markdown input."...

CVE-2009-3437

The CVE-2009-3437 entry describes a Cross-site Scripting (XSS) vulnerability in Drupal’s Markdown Preview module (live preview feature), version 6.x. The underlying issue allows remote attackers to inject arbitrary web script or HTML via the Markdown input in the live preview. Documents confirm t...

SA-CONTRIB-2009-061 - Markdown Preview - Cross Site Scripting

The Markdown Preview module provides a live preview pane that displays the rendered HTML output of your Markdown input. When displaying the live preview, the module does not properly escape user entered data, leading to a cross-site scripting XSS vulnerability. Such an attack may lead to a...