Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2024-21535

markdown-to-jsx: Cross-site Scripting vulnerability in markdown-to-jsx

Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting (XSS) via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Markdown-to-jsx Quantizor
Products
Markdown-to-jsx Markdown-to-jsx