Security Advisory

CVE-2018-19057

6.1
MEDIUM

Vulnerability Description

SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via certain input with [ and ( characters, which is mishandled during construction of an A element.
Published Date November 7, 2018
Official Source NIST NVD Advisory