@bndynet/bbootstrap (>=1.0.2 <=2.2.1), @bndynet/jslib (>=1.0.52 <=2.0.0) +8 more potentially affected by CVE-2020-19697 via editor.md (=1.5.0)

editor.md NPM version =1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on editor.md and may be impacted: - @bndynet/bbootstrap =1.0.2, =1.0.52, =2.3.6, =1.0.0, =0.2.0, =0.1.1, =0.1.0, =1.0.0, =1.0.3 Source cves: CVE-2020-19697 Source advisory:...

CVE-2020-19697

CVE-2020-19697 concerns the Pandao Editor.md project, version 1.5.0, with a Cross-Site Scripting (XSS) vulnerability. The issue allows a remote attacker to execute arbitrary code by crafting the script for the iframe src parameter. The available connected documents consistently describe the XSS f...

CVE-2020-19697

Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script in the src parameter...