medium6.1
CVE-2018-19056
Pandao editor.md vulnerable to DOM XSS
Impact
pandao Editor.md 1.5.0 has DOM XSS via input starting with a `<<` substring, which is mishandled during construction of an `A` element.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | editor.md | = 1.5.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipandao | Editor.Md | Version 1.5.0 |