← Back to CVE List

CVE-2017-11594

Published: 2017-07-24T01:29Z
Last Modified: 2024-11-21T03:08Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Cross-site scripting (XSS) vulnerability in the Markdown parser in Loomio before 1.8.0 allows remote attackers to inject arbitrary web script or HTML via non-sanitized Markdown content in a new thread or a thread comment. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt