Cross-site Scripting (XSS)

2018-09-0305:13:25

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

29.3%

JSON

editor.md is vulnerable to cross-site scripting (XSS) attacks. The library does not properly sanitize the user input before rendering the markdown, allowing a malicious user can inject and execute arbitrary Javascript through the editor.

CPENameOperatorVersion
editor.mdeq1.5.0
editor.mdle1.5.0
editor.mdeq1.5.0

Name	Operator	Version
editor.md	eq	1.5.0
editor.md	le	1.5.0
editor.md	eq	1.5.0

References

github.com/pandao/editor.md/issues/612

0.001 Low

EPSS

Percentile

29.3%

JSON

Related for VERACODE:7399