Medium severity6.1NVD Advisory· Published Feb 3, 2020· Updated Jun 17, 2026

CVE-2020-8548

Description

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).

Affected products

MassCode/massCode2 versions
cpe:2.3:a:masscode:masscode:1.0.0:alpha.6:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:masscode:masscode:1.0.0:alpha.6:*:*:*:*:*:*
- (no CPE)range: <=1.0.0-alpha.6
massCode/massCodedescription

Patches

Vulnerability mechanics

References

github.com/antonreshetov/massCode/issues/44nvdExploitThird Party Advisory
github.com/antonreshetov/massCode/issues/43nvdNot Applicable

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000