PatchTheCVE: editor.mdhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-19660: Cross Site Scripting (XSS) pandao editor.md 1.5.0 allows attackers to execute arbitrary code via crafted linkehttps://patchthecve.com/cve/CVE-2020-19660.htmlhttps://patchthecve.com/cve/CVE-2020-19660.htmlWed, 17 Jun 2026 02:59:52 +0000MEDIUM 6.1: Cross Site Scripting (XSS) pandao editor.md 1.5.0 allows attackers to execute arbitrary code via crafted linked url values.CVE-2020-19698: Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbithttps://patchthecve.com/cve/CVE-2020-19698.htmlhttps://patchthecve.com/cve/CVE-2020-19698.htmlWed, 17 Jun 2026 02:59:54 +0000MEDIUM 6.1: Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter.CVE-2020-19697: Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbithttps://patchthecve.com/cve/CVE-2020-19697.htmlhttps://patchthecve.com/cve/CVE-2020-19697.htmlWed, 17 Jun 2026 02:59:54 +0000MEDIUM 6.1: Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script in the <iframe>src parameter.