Unrated

Cross Site Scripting (XSS) vulnerability in Rendering Engine in jbt Markdown Editor thru commit 2252418c27dffbb35147acd8ed324822b8919477, allows remot...

CVE-2020-19952 First seen on SecPulse Aug 11, 2023

Original description The description as published by the source.

Cross Site Scripting (XSS) vulnerability in Rendering Engine in jbt Markdown Editor thru commit 2252418c27dffbb35147acd8ed324822b8919477, allows remote attackers to execute arbirary code via crafted payload or opening malicious .md file.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch github.com
patch github.com
report github.com

Key facts

Severity: Unrated
Published: Aug 11, 2023
First seen on SecPulse: Aug 11, 2023

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52