CVE-2020-28459

HIGH · CVSS 7.3 EPSS 0.57%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-07-25 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.3. It affects Java.

CVE

CVE-2020-28459

Severity

HIGH

CVSS

7.3

EPSS

0.57%

Java

This affects all versions of package markdown-it-decorate. An attacker can add an event handler or use javascript:xxx for the link.