2 matches found
CVE-2018-16330
Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element.
CVE-2018-19056
pandao Editor.md 1.5.0 has DOM XSS via input starting with a "<