Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:13619
HistoryApr 09, 2019 - 7:30 a.m.

Cross-Site Scripting (XSS)

2019-04-0907:30:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.001 Low

EPSS

Percentile

51.1%

simple-markdown is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject arbitrary Javascript into a victim’s browser via Data or Vbscript URIs, e.g data:text/html;base64,PHNjcmlwdD5hbGVydCgnaGknKTwvc2NyaXB0Pg==

0.001 Low

EPSS

Percentile

51.1%