CVE-2014-3743

Multiple cross-site scripting (XSS) vulnerabilities in the Marked module before 0.3.1 for Node.js allow remote attackers to inject arbitrary web script or HTML…

published January 6, 2020

CVSS
—
EPSS
2%
Percentile
77.2
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in the Marked module before 0.3.1 for Node.js allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) gfm codeblocks (language) or (2) javascript url's.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01715 · 77.2th percentile
Published
2020-01-06T19:41Z
EPSS history
Timeline
  • 06 JAN 19:41Z
    Multiple cross-site scripting (XSS) vulnerabilities in the Marked module before 0.3.1 for Node.js allow remote attackers to inject arbitrary web script or HTML…
    cvelistv5