CVE-2020-8548

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true)

published February 3, 2020

CVSS
—
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01436 · 72.9th percentile
Published
2020-02-03T16:32Z
EPSS history
Timeline
  • 03 FEB 16:32Z
    massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true)
    cvelistv5