Epiceditor Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Epiceditor Project records in CISA KEV

No Epiceditor Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Epiceditor · all components

TI-2017-04351 CVE-2017-6589 · GHSA-4wc5-gfgh-4vjx

LOW 28

EpicEditor through 0.2.3 has Cross-Site Scripting because of an insecure default marked.js configuration.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00683 Published 2017-03-09 No fix listed CWE-79