Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3061▲ 555 respecto a la semana anterior

Críticas / altas1459▲ 279 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▲ 175 respecto a la semana anterior

11 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2020-19660	Modificada	Media (6.1)	0.41%	—	Ipandao Editor.md	8/5/2023	17/6/2026	Cross Site Scripting (XSS) pandao editor.md 1.5.0 allows attackers to execute arbitrary code via crafted linked url values.
CVE-2023-29641	Modificada	Media (6.1)	0.43%	—	Ipandao Editor.md	1/5/2023	17/6/2026	Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text.
CVE-2020-19698	Modificada	Media (6.1)	0.66%	—	Ipandao Editor.md	4/4/2023	17/6/2026	Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter.
CVE-2020-19697	Modificada	Media (6.1)	0.66%	—	Ipandao Editor.md	4/4/2023	17/6/2026	Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script in the <iframe>src parameter.
CVE-2019-14653	Modificada	Media (6.1)	0.79%	—	Ipandao Editor.md	3/8/2019	17/6/2026	pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element.
CVE-2019-14517	Modificada	Media (6.1)	0.86%	—	Editor.md Project Editor.md	1/8/2019	17/6/2026	pandao Editor.md 1.5.0 allows XSS via the Javascript: string.
CVE-2019-9737	Modificada	Media (6.1)	0.86%	—	Ipandao Editor.md	13/3/2019	17/6/2026	Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.
CVE-2018-19056	Modificada	Media (6.1)	0.79%	—	Ipandao Editor.md	7/11/2018	17/6/2026	pandao Editor.md 1.5.0 has DOM XSS via input starting with a "<<" substring, which is mishandled during construction of an A element.
CVE-2018-18919	Modificada	Media (4.8)	0.82%	—	Iiong WP Editor.md	4/11/2018	17/6/2026	The WP Editor.md plugin 10.0.1 for WordPress allows XSS via the comment area.
CVE-2018-16330	Modificada	Media (6.1)	0.86%	—	Ipandao Editor.md	2/9/2018	17/6/2026	Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element.
CVE-2017-9336	Modificada	Media (6.1)	0.63%	—	WP Editor.md Project WP Editor.md	1/6/2017	17/6/2026	The WP Editor.MD plugin 1.6 for WordPress has a stored XSS vulnerability in the content of a post.