6247 matches found
[SECURITY] Fedora 32 Update: python-markdown2-2.3.9-1.fc32
Markdown is a text-to-HTML filter; it translates an easy-to-read / easy-to-write structured text format into HTML. Markdown's text format is most similar to that of plain text email, and supports features such as headers, emphasis, code blocks, blockquotes, and links. This is a fast and complete...
OPENSUSE-SU-2020:0656-1 Security update for python-markdown2
This update for python-markdown2 fixes the following issues: - CVE-2020-11888: Fixed unsanitized input for cross-site scripting boo1171379 This update was imported from the openSUSE:Leap:15.1:Update update project...
Wiki.js Cross-Site Scripting Vulnerability
Wiki.js is Requarks.io team of a set of Node.js-based and written in JavaScript language open source Wiki software . A cross-site scripting vulnerability exists in the Markdown borderer in Wiki.js versions prior to 2.3.81. The vulnerability stems from a lack of proper validation of client-side da...
CVE-2020-11051
In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor. An editor with write access to a page, using the Markdown editor, could inject an XSS payload into the content. If another editor with write access as well load the same page into the Markdown editor, the XSS payload will be...
CVE-2020-11051
In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor. An editor with write access to a page, using the Markdown editor, could inject an XSS payload into the content. If another editor with write access as well load the same page into the Markdown editor, the XSS payload will be...
Cross site scripting
In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor. An editor with write access to a page, using the Markdown editor, could inject an XSS payload into the content. If another editor with write access as well load the same page into the Markdown editor, the XSS payload will be...
CVE-2020-11051
In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor. An editor with write access to a page, using the Markdown editor, could inject an XSS payload into the content. If another editor with write access as well load the same page into the Markdown editor, the XSS payload will be...
CVE-2020-11051 XSS in Wiki.js
In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor. An editor with write access to a page, using the Markdown editor, could inject an XSS payload into the content. If another editor with write access as well load the same page into the Markdown editor, the XSS payload will be...
CVE-2020-11051
CVE-2020-11051 : Wiki.js before 2.3.81 has a stored XSS in the Markdown editor. An editor with write access can inject payloads into content; when another editor loads the same page in the Markdown editor, the payload can execute in the preview panel. The HTML sanitization strips the payload in r...
CVE-2020-11051: Improper Neutralization of Input During Web Page Generation
In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor. An editor with write access to a page, using the Markdown editor, could inject an XSS payload into the content. If another editor with write access as well load the same page into the Markdown editor, the XSS payload will be...
PT-2020-12512
Name of the Vulnerable Software and Affected Versions Wiki.js versions prior to 2.3.81 Description The issue is related to a stored XSS in the Markdown editor. An editor with write access to a page can inject an XSS payload into the content using the Markdown editor. If another editor with write...
Cross-site Scripting (XSS)
markdown-to-jsx is vulnerable to cross-site scripting XSS attacks. The library does not properly convert tag names to lowercase before evaluating against the blacklist, allowing a malicious user to inject script and style tags by using uppercase letters...
1st_test_yamineo (0.1.0), @akaterra.co/apidog (>=0.0.4, <=0.0.5) +885 more potentially affected by unknown CVE via markdown (>=0.1.2, <=0.5.0)
markdown NPM version =0.1.2, =0.0.4, =0.0.102, =0.1.0, =0.4.0, =0.0.5, =2.1.1, =2.0.0, =0.0.2, =2.1.1, =2.1.1, =2.1.1, =2.1.1, =2.9.14 and more Source cves: unknown CVE Source advisory: SNYK:JS-MARKDOWN-560793...
Regular Expression Denial of Service (ReDoS)
Overview markdown is a yet another markdown parser, this time for JavaScript. Note: This package is no longer actively maintained and should be considered deprecated. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. It is possible under certain...
Elastic: Stored XSS in TSVB Visualizations Markdown Panel
NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! Summary: An authenticated user can save...
Zulip server Markdown parser cross-site scripting vulnerability
Zulip server is an open source team chat application from Zulip Inc.Markdown parser is one of the Markdown markup language parser. A cross-site scripting vulnerability exists in the modallink function of Markdown parser in Zulip Server versions prior to 2.1.3. The vulnerability stems from a lack ...
CVE-2020-9445
Zulip Server before 2.1.3 allows XSS via the modallink feature in the Markdown functionality...
CVE-2020-9444
Zulip Server before 2.1.3 allows reverse tabnabbing via the Markdown functionality...