Login Request a demo
ED
Product
Editor.md
by Ipandao · last CVE May 8, 2023
8
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 0Medium 8Low 0
Severity
All severities8Critical0High0Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Editor.md to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-19660
6.1
0%
May 8
Cross Site Scripting (XSS) pandao editor.md 1.5.0 allows attackers to execute arbitrary code via crafted linked url values
Affected: 1.5.0
CVE-2023-29641
6.1
0%
May 1
Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text
Affected: through 1.5.0
CVE-2020-19698
6.1
1%
Apr 4
Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter
Affected: 1.5.0
CVE-2020-19697
6.1
1%
Apr 4
Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script in the <iframe>src parameter
Affected: 1.5.0
CVE-2019-14653
6.1
1%
Aug 3
pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element
Affected: 1.5.0
CVE-2019-9737
6.1
1%
Mar 13
Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring
Affected: 1.5.0
CVE-2018-19056
6.1
1%
Nov 7
pandao Editor.md 1.5.0 has DOM XSS via input starting with a "<<" substring, which is mishandled during construction of an A element
Affected: 1.5.0
CVE-2018-16330
6.1
1%
Sep 2
Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element
Affected: 1.5.0
Showing 8