medium6.1
CVE-2018-16330
Pandao editor.md vulnerable to XSS in IMG attributes
Impact
Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | editor.md | = 1.5.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipandao | Editor.Md | Version 1.5.0 |