← All advisories

Medium severity6.1NVD Advisory· Published Mar 13, 2019· Updated Jun 17, 2026

CVE-2019-9736

CVE-2019-9736

Description

DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.

Affected products

3

1024tools/1024tools
cpe:2.3:a:1024tools:1024tools:1.0:*:*:*:*:*:*:*
1024tools/Markdowninferred2 versions
= 1.0+ 1 more
- (no CPE)range: = 1.0
- (no CPE)range: 1.0

Patches

Vulnerability mechanics

References

1

github.com/cnxh/1024tools/issues/20nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.