CVE-2020-11888
20.04.2020, 16:15
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute.
| Vendor | Product | Version |
|---|---|---|
| python-markdown2_project | python-markdown2 | 𝑥 ≤ 2.3.8 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References