CVE-2018-19056

描述

pandao Editor.md 1.5.0 has DOM XSS via input starting with a `<<` substring, which is mishandled during construction of an `A` element.

受影響套件(1)

• npm/editor.md

CVSS 分數

參考連結(4)

• ADVISORYhttps://github.com/advisories/GHSA-x3g3-334f-q6h4
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2018-19056
• PATCHhttps://github.com/pandao/editor.md
• WEBhttps://github.com/pandao/editor.md/issues/634