ZeroHour

Vulnerabilities

2 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2017-6591
There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field.

There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field.

NVD description · AI analysis pending
6.1<1% PoC
  • django-epiceditor project django-epiceditor
CVE-2017-6589
EpicEditor through 0.2.3 has Cross-Site Scripting because of an insecure default marked.js configuration.

EpicEditor through 0.2.3 has Cross-Site Scripting because of an insecure default marked.js configuration. An example attack vector is a crafted IMG element in an HTML document.

NVD description · AI analysis pending
6.1<1% PoC
  • epiceditor project epiceditor