ipandao records
8 published records for vendor ipandao.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2018-16330No exploit | Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element.ipandao · editor.md · CWE-79 | Medium6.1 | — | 0.9% | Sep 1, 2018 |
24Monitor | CVE-2019-9737No exploit | Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.ipandao · editor.md · CWE-79 | Medium6.1 | — | 0.9% | Mar 12, 2019 |
24Monitor | CVE-2018-19056No exploit | pandao Editor.md 1.5.0 has DOM XSS via input starting with a "<<" substring, which is mishandled during construction of an A element.ipandao · editor.md · CWE-79 | Medium6.1 | — | 0.8% | Nov 7, 2018 |
24Monitor | CVE-2019-14653No exploit | pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element.ipandao · editor.md · CWE-79 | Medium6.1 | — | 0.8% | Aug 3, 2019 |
24Monitor | CVE-2020-19698No exploit | Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted scriptipandao · editor.md · CWE-79 | Medium6.1 | — | 0.7% | Apr 4, 2023 |
24Monitor | CVE-2020-19697No exploit | Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted scriptipandao · editor.md · CWE-79 | Medium6.1 | — | 0.7% | Apr 4, 2023 |
24Monitor | CVE-2023-29641No exploit | Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted ipandao · editor.md · CWE-79 | Medium6.1 | — | 0.4% | May 1, 2023 |
24Monitor | CVE-2020-19660No exploit | Cross Site Scripting (XSS) pandao editor.md 1.5.0 allows attackers to execute arbitrary code via crafted linked url values.ipandao · editor.md · CWE-79 | Medium6.1 | — | 0.4% | May 8, 2023 |
- CVE-2018-1633024Monitor
Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element.
MediumCVSS 6.1No exploitEPSS 1%ipandao · editor.mdSep 1, 2018
- CVE-2019-973724Monitor
Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.
MediumCVSS 6.1No exploitEPSS 1%ipandao · editor.mdMar 12, 2019
- CVE-2018-1905624Monitor
pandao Editor.md 1.5.0 has DOM XSS via input starting with a "<<" substring, which is mishandled during construction of an A element.
MediumCVSS 6.1No exploitEPSS 1%ipandao · editor.mdNov 7, 2018
- CVE-2019-1465324Monitor
pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element.
MediumCVSS 6.1No exploitEPSS 1%ipandao · editor.mdAug 3, 2019
- CVE-2020-1969824Monitor
Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script
MediumCVSS 6.1No exploitEPSS 1%ipandao · editor.mdApr 4, 2023
- CVE-2020-1969724Monitor
Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script
MediumCVSS 6.1No exploitEPSS 1%ipandao · editor.mdApr 4, 2023
- CVE-2023-2964124Monitor
Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted
MediumCVSS 6.1No exploitEPSS 0%ipandao · editor.mdMay 1, 2023
- CVE-2020-1966024Monitor
Cross Site Scripting (XSS) pandao editor.md 1.5.0 allows attackers to execute arbitrary code via crafted linked url values.
MediumCVSS 6.1No exploitEPSS 0%ipandao · editor.mdMay 8, 2023