CVE-2023-29641

pandao/editor.md

on github

Published

May 1, 2023

Severity

CVSS v3:

6.1 MEDIUM

CVSS v2:

N/A

Description

Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text.

References

https://github.com/pandao/editor.md/issues/985

Configurations

CPE23	Version Start	Version End	Exact Version
cpe:2.3:a:ipandao:editor.md::::::::	n/a	1.5.0 (including)	*

External Links

NVD - CVE-2023-29641