Approved changes feed: RSS · Atom

cpe:2.3:a:inkdrop:markdown_nice:1.8.22:*:*:*:*:*:*:*

part: a version: 1.8.22 update: *

VendorInkdrop (66515606-8366-5dab-b73c-044ff53824be)
ProductMarkdown Nice (1777f389-fff7-5a1b-a53a-90b2f11763c7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mdnice/markdown-nice purl2cpe 2026-06-01 10:14:21.912377
pkg:npm/markdown-nice purl2cpe 2026-06-01 10:14:21.912380

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-38639 vulnerable 2026-06-08 05:47:16.732448 Details available
A cross-site scripting (XSS) vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field.
Published: 2022-09-09T18:49:10.000Z
Updated: 2024-08-03T11:02:13.489Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.