Lucene search
IpandaoEditor.md
2 matches found
CVE-2019-14653
pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element.
6.1CVSS5.9AI score0.00223EPSS
CVE-2019-9737
Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.
6.1CVSS5.8AI score0.0024EPSS