PT-2020-21059 · Markdown It · Markdown-It-Katex
Published
2020-09-04
·
Updated
2020-09-04
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
markdown-it-katex versions (affected versions not specified)
Description
The issue concerns a failure to properly escape error messages, potentially allowing attackers to execute arbitrary JavaScript in a victim's browser by triggering an error. This could lead to Cross-Site Scripting (XSS) attacks.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Markdown-It-Katex