Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3649
HistoryMar 10, 2017 - 5:46 a.m.

Cross-site Scripting (XSS)

2017-03-1005:46:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

EPSS

0.006

Percentile

77.7%

epiceditor is vulnerable to cross-site scripting (XSS) attacks. The vulnerability is possible because it does not escape the input tags when rendering a page using marked.js.

EPSS

0.006

Percentile

77.7%