Pandao Editor.md vulnerable to cross-site scripting (XSS) in editor parameter

中危 6.1CVE-2020-19698 · GHSA-5p84-mmh9-pxgr · Published 04/04/2023 · updated 17/06/2026

要点

CVE-2020-19698 是影响 editor.md (ipandao), editor.md 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.66%，高于 51.7% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
editor.md ipandao	`= 1.5.0`	No fix yet
editor.md npm	`≤ 1.5.0`	No fix yet

Description

Cross-site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter.

NVD description

Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter.

References

nvd.nist.gov/vuln/detail/CVE-2020-19698 · ADVISORY
pandao/editor.md · WEB
pandao/editor.md#860 · WEB
pandao/editor.md · PACKAGE

editor.md 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

editor.md

ipandao

= 1.5.0

No fix yet

editor.md

npm

≤ 1.5.0

No fix yet

Description

Cross-site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter.

NVD description

Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter.

editor.md 的其他漏洞

查看全部 →