CVE-2023-29641 - Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text

Back Back to CVE browser

MEDIUM

Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text

Published May 1, 2023

6.1

MEDIUM

CVSS 3.1

EPSS 0.43%

Description

Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text.

Affected products

Ecosystem	Package	Introduced	Fixed
npm	editor.md	0	not fixed

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-1499
Advisory
https://github.com/advisories/GHSA-847g-34c5-vvm8
Advisory
https://github.com/pandao/editor.md/issues/985
ExploitIssue TrackingVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29641

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-1499		Advisory
https://github.com/advisories/GHSA-847g-34c5-vvm8		Advisory
https://github.com/pandao/editor.md/issues/985		ExploitIssue TrackingVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29641