CVE-2020-19952

Source
https://nvd.nist.gov/vuln/detail/CVE-2020-19952
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-19952.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-19952
Published
2023-08-11T14:15:09Z
Modified
2025-01-08T05:33:32Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Cross Site Scripting (XSS) vulnerability in Rendering Engine in jbt Markdown Editor thru commit 2252418c27dffbb35147acd8ed324822b8919477, allows remote attackers to execute arbirary code via crafted payload or opening malicious .md file.

References

Affected packages

Git / github.com/jbt/markdown-editor

Affected ranges

Type
GIT
Repo
https://github.com/jbt/markdown-editor
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Fixed