134 matches found
UBUNTU-CVE-2020-11888
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
PYSEC-2020-65
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
CVE-2020-11888
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
aequitas (>=0.26.0, <=0.42.0), ax (>=0.39.0, <=0.52.0) +17 more potentially affected by CVE-2020-11888 via markdown2 (>=2.3.0, <=2.3.8)
markdown2 PYPI version =2.3.0, =0.26.0, =0.39.0, =0.1.0, =0.0.1, =0.4.1, =0.0.1, =0.2.2, =2024.10.27.post1, =0.4.3, =0.0.1, =1.5.1, =1.7.3 and more Source cves: CVE-2020-11888 Source advisory: OSV:PYSEC-2020-65...
PYSEC-2020-65
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
Cross site scripting
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
CVE-2020-11888
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
CVE-2020-11888
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
aequitas (>=0.26.0, <=0.42.0), ax (>=0.39.0, <=0.52.0) +17 more potentially affected by CVE-2020-11888 via markdown2 (>=2.3.0, <=2.3.8)
markdown2 PYPI version =2.3.0, =0.26.0, =0.39.0, =0.1.0, =0.0.1, =0.4.1, =0.0.1, =0.2.2, =2024.10.27.post1, =0.4.3, =0.0.1, =1.5.1, =1.7.3 and more Source cves: CVE-2020-11888 Source advisory: MEND:CVE-2020-11888...
CVE-2020-11888
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
PT-2020-12921
Name of the Vulnerable Software and Affected Versions python-markdown2 versions 2.3.8 and earlier Description The issue arises from the mishandling of element names, which can lead to XSS attacks unless a w+ match succeeds. An example of a potential attack involves using element names with specia...
CVE-2020-11888: Improper Neutralization of Input During Web Page Generation
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
py-markdown2 -- XSS vulnerability
TheGrandPew reports: python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
python-markdown2 cross-site scripting vulnerability
python-markdown is a library for python. A cross-site scripting vulnerability exists in python-markdown2 versions prior to 1.0.1.14. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-si...
CVE-2009-3724
python-markdown2 before 1.0.1.14 has multiple cross-site scripting XSS issues...
PYSEC-2020-235
python-markdown2 before 1.0.1.14 has multiple cross-site scripting XSS issues...
PYSEC-2020-235
python-markdown2 before 1.0.1.14 has multiple cross-site scripting XSS issues...
Cross site scripting
python-markdown2 before 1.0.1.14 has multiple cross-site scripting XSS issues...
CVE-2009-3724
CVE-2009-3724 affects the Python package markdown2 prior to version 1.0.1.14, with multiple cross-site scripting (XSS) issues reported across multiple sources. The vulnerability stems from insufficient input validation/escaping in the affected library, enabling attacker-controlled input to be ref...