Lucene search
Veracode Vulnerability DatabaseVERACODE:40130HistoryApr 17, 2023 - 10:24 a.m.
Cross-Site Scripting (XSS)
2023-04-1710:24:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
cross-site scripting
editor.md
vulnerability
malicious javascript
browser
injection
0.001 Low
EPSS
Percentile
41.8%
editor.md is vulnerable to Cross-Site Scripting (XSS) attacks. The library does not properly escape the special characters before it output to the front end as a crafted script through the editor parameter, which allows an attacker to inject and execute malicious JavaScript in the victim’s browser.
Related
github
github
cve
cve
CVE-2020-19698
2023-04-04 15:15:07
osv
osv
CVE-2020-19698
2023-04-04 15:15:07
prion
prion
Cross site scripting
2023-04-04 15:15:00
nvd
nvd
CVE-2020-19698
2023-04-04 15:15:07
cvelist
cvelist
CVE-2020-19698
2023-04-04 00:00:00