ipandao vulnerabilities

Products

• editor.md 4

Latest ipandao CVEs

Newest publication first

1. CVE-2019-14653 Cross-site Scripting in pandao

   Published 2019-08-03

   Medium·CVSS 6.1 EPSS 0.79%

   pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element.

2. CVE-2019-9737 Cross-Site Scripting in editor.md

   Published 2019-03-13

   Medium·CVSS 6.1 EPSS 0.86%

   Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.

3. CVE-2018-19056 Pandao editor.md vulnerable to DOM XSS

   Published 2018-11-07

   Medium·CVSS 6.1

   pandao Editor.md 1.5.0 has DOM XSS via input starting with a "<<" substring, which is mishandled during construction of an A element.

4. CVE-2018-16330 Pandao editor.md vulnerable to XSS in IMG attributes

   Published 2018-09-02

   Medium·CVSS 6.1

   Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.