growppt (>=1.0.0, <=2.1.1), mathjax-node-aixuexi (>=1.0.7, <=1.0.9) +3 more potentially affected by CVE-2018-1999024 via mathjax (>=2.6.1, <=2.7.3)

mathjax NPM version =2.6.1, =1.0.0, =1.0.7, =1.4.3, =1.2.3, =1.2.4 Source cves: CVE-2018-1999024 Source advisory: OSV:GHSA-3C48-6PCV-88RM...

Cross-site Scripting (XSS)

mathjax is vulnerable to cross-site scripting XSS attacks. The vulnerability exists through the improper sanitization through the \unicode and \class mcaros, allowing arbitrary JavaScript to be executed when rendered...

CVE-2018-1999024

MathJax version prior to version 2.7.4 contains a Cross Site Scripting XSS vulnerability in the \unicode macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processe...

DEBIAN-CVE-2018-1999024

MathJax version prior to version 2.7.4 contains a Cross Site Scripting XSS vulnerability in the \unicode macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processe...

AZL-41294 CVE-2018-1999024 affecting package numpy for versions less than 1.26.3-4

MathJax version prior to version 2.7.4 contains a Cross Site Scripting XSS vulnerability in the \unicode macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processe...

UBUNTU-CVE-2018-1999024

MathJax version prior to version 2.7.4 contains a Cross Site Scripting XSS vulnerability in the \unicode macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processe...

CVE-2018-1999024

MathJax version prior to version 2.7.4 contains a Cross Site Scripting XSS vulnerability in the \unicode macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processe...

CVE-2018-1999024

MathJax version prior to version 2.7.4 contains a Cross Site Scripting XSS vulnerability in the \unicode macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processe...

Cross site scripting

MathJax version prior to version 2.7.4 contains a Cross Site Scripting XSS vulnerability in the \unicode macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processe...

CVE-2018-1999024

MathJax version prior to version 2.7.4 contains a Cross Site Scripting XSS vulnerability in the \unicode macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processe...

CVE-2018-1999024

MathJax version prior to version 2.7.4 contains a Cross Site Scripting XSS vulnerability in the \unicode macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processe...

CVE-2018-1999024

CVE-2018-1999024 is a MathJax XSS vulnerability in the Unicode macro present in versions prior to 2.7.4. The issue allows potentially untrusted JavaScript to execute in a browser when a page processes untrusted content with MathJax. The vulnerability can be triggered by a victim viewing such cont...

CVE-2018-1999024

MathJax version prior to version 2.7.4 contains a Cross Site Scripting XSS vulnerability in the \unicode macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processe...

growppt (>=1.0.0, <=2.1.1), mathjax-node-aixuexi (>=1.0.7, <=1.0.9) +3 more potentially affected by CVE-2018-1999024 via mathjax (>=2.6.1, <=2.7.3)

mathjax NPM version =2.6.1, =1.0.0, =1.0.7, =1.4.3, =1.2.3, =1.2.4 Source cves: CVE-2018-1999024 Source advisory: MEND:CVE-2018-1999024...

PT-2018-15203 · Mathjax +1 · Mathjax +1

Name of the Vulnerable Software and Affected Versions: MathJax versions prior to 2.7.4 Description: The issue concerns a Cross Site Scripting XSS vulnerability in the unicode macro. This vulnerability can result in potentially untrusted JavaScript running within a web browser. The attack appears ...

CVE-2018-1999024: Improper Neutralization of Input During Web Page Generation

MathJax version prior to version 2.7.4 contains a Cross Site Scripting XSS vulnerability in the \unicode macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processe...

mathjax.org XSS vulnerability

Vulnerable URL: https://www.mathjax.org/ Details: Description| Value ---|--- Patched:| Yes, at 25.09.2017 Latest check for patch:| 25.09.2017 11:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 140978 Google Pagerank| 7 VIP website status:| Yes Check mathjax.o...

Mathjax Latex 1.1 - Setting Manipulation CSRF

The MathJax-LaTeX WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

Wordpress Mathjax Latex Plugin 1.1 - CSRF Vulnerability

No description provided by source. Title: Wordpress Mathjax Latex 1.1 Cross-Site Request Forgery Vulnerability Release Date: 25/03/13 Author: Junaid Hussain illSecure Research Group Contact: [email protected] | Website: illSecure.com Software Link:...

WordPress Mathjax Latex Plugin 1.1 - CSRF

Mathjax Latex plugin is prone to a cross-site request forgery. It allows to specify Javascript that will be loaded with each post. Also, it will be loaded onto the homepage of the WordPress blog. Solution Update the plugin...