Lucene search
Veracode Vulnerability DatabaseVERACODE:20988HistoryAug 05, 2019 - 6:37 a.m.
Cross-site Scripting (XSS)
2019-08-0506:37:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
37.3%
editor.md is vulnerable to cross-site scripting (XSS). The attack is possible because a user’s input in the attribute of an ABBR or SUP tags are not sanitized, allowing an attacker to inject a malicious script through it.
References
Related
prion
prion
Cross site scripting
2019-08-03 14:15:00
github
github
Cross-site Scripting in pandao
2019-08-23 00:05:00
cve
cve
CVE-2019-14653
2019-08-03 14:15:11
osv
osv
Cross-site Scripting in pandao
2019-08-23 00:05:00
CVE-2019-14653
2019-08-03 14:15:11
nvd
nvd
CVE-2019-14653
2019-08-03 14:15:11
cvelist
cvelist
CVE-2019-14653
2019-08-03 13:20:00