VYPR

Epiceditor

by Epiceditor Project

npm: epiceditor

CVEs (1)

  • CVE-2017-6589MedMar 9, 2017
    risk 0.40cvss 6.1epss 0.01

    EpicEditor through 0.2.3 has Cross-Site Scripting because of an insecure default marked.js configuration. An example attack vector is a crafted IMG element in an HTML document.