CVE-2019-9736

CVE-2019-9736 affects 1024Tools Markdown 1.0 with a DOM-based XSS vulnerability triggered by embedding an SVG data URL via the substring ‘<EMBED SRC="data:image/svg+xml'’. The NVD entries cite CVSS2/3 base scores of 4.3 (MEDIUM) and 6.1 (MEDIUM), respectively; attack vector is NETWORK (CVSS2) ...