Security Advisory

CVE-2017-16019

6.1
MEDIUM

Vulnerability Description

GitBook is a command line tool (and Node.js library) for building beautiful books using GitHub/Git and Markdown (or AsciiDoc). Stored Cross-Site-Scripting (XSS) is possible in GitBook before 3.2.2 by including code outside of backticks in any ebook. This code will be executed on the online reader.
Published Date June 4, 2018
Official Source NIST NVD Advisory