medium6.1
CVE-2023-29641
editor.md vulnerable to Cross-site Scripting
Impact
Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | editor.md | <= 1.5.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipandao | Editor.Md | through 1.5.0 |