medium6.1
CVE-2019-9737
Cross-Site Scripting in editor.md
Impact
All versions of `editor.md` are vulnerable to Cross-Site Scripting. User input is insufficiently sanitized, allowing attackers to inject malicious code in payloads containing base64-encoded content. ## Recommendation No fix is currently available. Consider using an alternative module until a fix is made available.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | editor.md | = 1.5.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipandao | Editor.Md | Version 1.5.0 |