4 matches found
EUVD-2018-0786
Malware in sbrugna...
CVE-2019-9737
Summary: CVE-2019-9737 affects Editor.md 1.5.0 with a DOM-based XSS vulnerability triggered by vectors including the substring <EMBED SRC="data:image/svg+xml.** The root cause is persistent insufficient sanitization of user input that can introduce base64-encoded content, enabling script execu...
CVE-2019-9737
Editor.md 1.5.0 has DOM-based XSS via vectors involving the 'EMBED SRC="data:image/svg+xml' substring...
CVE-2018-19056
pandao Editor.md 1.5.0 has DOM XSS via input starting with a "" substring, which is mishandled during construction of an A element...