VULNERABILITY INTELLIGENCE
CVE-2015-1370
CVSS score4.3 MEDIUM
EPSS probability2.04%
CISA KEVNot currently listed
Published2015-01-27
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Incomplete blacklist vulnerability in marked 0.3.2 and earlier for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks via a vbscript tag in a link.