2 matches found
GHSA-4R9G-W48Q-8JWM HyperDown vulnerable to Cross-site Scripting
HyperDown is a markdown parser written for the Chinese website SegmentFault. Improper validation of the href attribute allows for Cross-site Scripting. At publication there are no patched versions, and no known workarounds...
6.1CVSS6.3AI score0.00478EPSS
SaveExploits1References3
HyperDown vulnerable to Cross-site Scripting
HyperDown is a markdown parser written for the Chinese website SegmentFault. Improper validation of the href attribute allows for Cross-site Scripting. At publication there are no patched versions, and no known workarounds...
6.1CVSS2.9AI score0.00478EPSS
SaveExploits1References3Affected Software1
20