CVE-2019-20903

MEDIUM · CVSS 5.4 EPSS 1.13%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-10-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-20903

Severity

MEDIUM

CVSS

5.4

EPSS

1.13%

Java

Original NVD Description

The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in link targets.