In short
- CVE-2023-29641 is a MEDIUM (CVSS 6.1) vulnerability affecting editor.md (ipandao), editor.md.
- Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 37.3% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
| Package | Affected versions | Patched versions |
|---|
| editor.md | ≤ 1.5.0
| No fix yet |
| editor.md npm | ≤ 1.5.0
| No fix yet |
Description
Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text.
NVD description
Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free