CVE-2019-9737
Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.
Published: 2019-03-13 · CVSS: Unscored
Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7