Lucene search
+L

13 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2022-6684

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00497EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/05/22 11:19 p.m.•10 views

CVE-2022-38639

A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...

5.4CVSS6.3AI score0.00497EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2022/09/10 12:00 a.m.•39 views

Markdown-Nice v1.8.22 vulnerable to Cross-site Scripting

A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...

5.4CVSS5.2AI score0.00497EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/09/10 12:00 a.m.•68 views

GHSA-462R-WXVM-JVXH Markdown-Nice v1.8.22 vulnerable to Cross-site Scripting

A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...

5.4CVSS5.2AI score0.00497EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/09/09 7:15 p.m.•12 views

CVE-2022-38639

A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...

5.4CVSS5.9AI score0.00497EPSS
SaveExploits1References2
NVD
NVD
•added 2022/09/09 7:15 p.m.•36 views

CVE-2022-38639

A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...

5.4CVSS0.00497EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/09 7:15 p.m.•11 views

CVE-2022-38639

A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...

5.4CVSS5.9AI score0.00497EPSS
SaveExploits1References1
Prion
Prion
•added 2022/09/09 7:15 p.m.•27 views

Cross site scripting

A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...

4.9CVSS5.2AI score0.00497EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/09/09 6:49 p.m.•48 views

CVE-2022-38639

A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...

5.4AI score0.00497EPSS
SaveExploits1References1
CVE
CVE
•added 2022/09/09 6:49 p.m.•80 views

CVE-2022-38639

Markdown-Nice v1.8.22 contains a Cross-site Scripting (XSS) vulnerability that enables attackers to run arbitrary script/HTML through a crafted payload in the Community Posting field. The issue is documented as CVE-2022-38639 and is referenced by multiple sources (GitHub advisory, OSV, NVD record...

5.4CVSS5.2AI score0.00497EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/09/09 12:00 a.m.•12 views

PT-2022-24496 · Unknown · Markdown-Nice

Name of the Vulnerable Software and Affected Versions: Markdown-Nice version 1.8.22 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field. Recommendations: For Markdown-Nice version...

5.4CVSS5.5AI score0.00497EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/09/09 12:00 a.m.•13 views

Markdown-Nice 跨站脚本漏洞

Markdown-Nice is an open source Markdown editor that supports theme design by inkdrop software mdnice. A security vulnerability exists in Markdown-Nice v1.8.22 that stems from the presence of cross-site scripting XSS, which allows an attacker to execute arbitrary web script or HTML via a speciall...

5.4CVSS5.8AI score0.00497EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/09 12:00 a.m.•3 views

CVE-2022-38639: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...

5.4CVSS6.2AI score0.00497EPSS
SaveExploits1References2
Rows per page
Query Builder