Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/17 6:35 p.m.9 views

GHSA-52MM-H59V-F3C7 earmark: Stored XSS via unescaped HTML attribute values

Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site scripting via unescaped HTML attribute values. 'Elixir.Earmark.Transform':makeatt1/2 in lib/earmark/transform.ex splices attribute values verbatim between two literal " bytes: ...

4.8CVSS5.1AI score0.00133EPSS
SaveExploits0References4
Rows per page
Query Builder