Cross-site Scripting (XSS)

2018-11-0806:25:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

28.0%

JSON

editor.md is vulnerable to a cross-site scripting attack. The library does not properly sanitize `` tags during markdown rendering, allowing a malicious user to inject and execute arbitrary Javascript.

CPENameOperatorVersion
editor.mdeq1.5.0
editor.mdle1.5.0
editor.mdeq1.5.0

Name	Operator	Version
editor.md	eq	1.5.0
editor.md	le	1.5.0
editor.md	eq	1.5.0

References

github.com/pandao/editor.md/issues/634

0.001 Low

EPSS

Percentile

28.0%

JSON

Related for VERACODE:7701