CoreCVE
Back

MEDIUM

Cross Site Scripting (XSS) vulnerability in Rendering Engine in jbt Markdown Editor thru commit 2252418c27dffbb35147acd8ed324822b8919477, allows remote attackers to execute arbirary code via crafted payload or opening malicious .md file

Published Aug 11, 2023

Description

Cross Site Scripting (XSS) vulnerability in Rendering Engine in jbt Markdown Editor thru commit 2252418c27dffbb35147acd8ed324822b8919477, allows remote attackers to execute arbirary code via crafted payload or opening malicious .md file.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 11, 2023
Updated Oct 9, 2024
Reserved Aug 13, 2020
Link CVE-2020-19952
CISA Vulnrichment
Updated Oct 9, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-19952
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-19952