CVE-2019-18209
templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of the URL, as demonstrated by Internet Explorer.
Published: 2019-10-19 · CVSS: Unscored
templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of the URL, as demonstrated by Internet Explorer.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7