{"action":"No fix published. Pin and monitor.","affected":[],"component":"editor.md","cve_ids":["CVE-2018-16330"],"ecosystem":"npm","epss":0.00865,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vjcj-5g2r-vxqc","id":"tcs_01M5KGC58RHE3GP72JCCCK029J","modified_at":"2023-11-08T03:59:58.966441Z","published_at":"2018-09-06T03:22:00Z","references":["https://osv.dev/vulnerability/GHSA-vjcj-5g2r-vxqc","https://nvd.nist.gov/vuln/detail/CVE-2018-16330","https://github.com/pandao/editor.md/issues/612","https://github.com/advisories/GHSA-vjcj-5g2r-vxqc","https://github.com/pandao/editor.md"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-vjcj-5g2r-vxqc","url":"https://osv.dev/vulnerability/GHSA-vjcj-5g2r-vxqc"}],"summary":"Pandao editor.md vulnerable to XSS in IMG attributes"}