Lucene search
Veracode Vulnerability DatabaseVERACODE:13456HistoryMar 14, 2019 - 9:40 a.m.
Cross-site Scripting (XSS)
2019-03-1409:40:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.001
Percentile
37.3%
editor.md is vulnerable to cross-site scripting (XSS). The vulnerability exists because it allows embedding of external svg file such as <EMBED SRC="data:image/svg+xml, allowing an attacker to launch dom-based cross-site scripting.
References
Related
osv
osv
Cross-Site Scripting in editor.md
2019-03-14 15:38:56
CVE-2019-9737
2019-03-13 02:29:00
github
github
Cross-Site Scripting in editor.md
2019-03-14 15:38:56
nvd
nvd
CVE-2019-9737
2019-03-13 02:29:00
prion
prion
Design/Logic Flaw
2019-03-13 02:29:00
nodejs
nodejs
Cross-Site Scripting
2019-04-02 19:38:50
cve
cve
CVE-2019-9737
2019-03-13 02:29:00
cvelist
cvelist
CVE-2019-9737
2019-03-13 02:00:00