CVE-2019-14517 - pandao Editor.md 1.5.0 allows XSS via the Javascript: string

MEDIUM

pandao Editor.md 1.5.0 allows XSS via the Javascript: string

Published Aug 1, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 0.86%

pandao Editor.md 1.5.0 allows XSS via the Javascript: string.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://github.com/advisories/GHSA-5q54-8p9j-x74j		Advisory
https://github.com/pandao/editor.md/issues/709		x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-14517

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Aug 1, 2019

Updated Aug 5, 2024

Reserved Aug 1, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a