What is GHSA-462r-wxvm-jvxh?

GHSA-462r-wxvm-jvxh is a security advisory published by GitHub Security Advisories with Medium severity. Markdown-Nice v1.8.22 vulnerable to Cross-site Scripting

Which CVE IDs does GHSA-462r-wxvm-jvxh cover?

GHSA-462r-wxvm-jvxh covers the following CVE IDs: CVE-2022-38639. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-462r-wxvm-jvxh?

GHSA-462r-wxvm-jvxh has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-462r-wxvm-jvxh?

GHSA-462r-wxvm-jvxh affects 1 product, including: npm/markdown-nice:\u003c= 1.8.22.

GHSA-462r-wxvm-jvxhMediumCVSS 5.4

Markdown-Nice v1.8.22 vulnerable to Cross-site Scripting

Vendor

GitHub Security Advisories

Published

September 10, 2022

Last Modified

February 2, 2023

🔗 CVE IDs covered (1)

CVE-2022-38639 →

📋 Description

A cross-site scripting (XSS) vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field.

🎯 Affected products1

npm/markdown-nice:<= 1.8.22

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2022-38639
https://github.com/mdnice/markdown-nice/issues/327
https://github.com/advisories/GHSA-462r-wxvm-jvxh