CVE-2018-5773

An issue was discovered in markdown2 (aka python-markdown2) through 2.3.5. The safe_mode feature, which is supposed to sanitize user input against XSS, is flawed and does not escape the input properly. With a crafted payload, XSS can be triggered, as demonstrated by omitting the final '>' character from an IMG tag.

• CWE-79

• https://github.com/trentm/python-markdown2/issues/285Third Party Advisory
• https://github.com/trentm/python-markdown2/issues/285Third Party Advisory

Published

Jan 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5764The parse_arguments function in options.c in rsyncd in rsync…7.5
• CVE-2018-5766In Libav through 12.2, there is an invalid memcpy in the av_…
• CVE-2018-5767An issue was discovered on Tenda AC15 V15.03.1.16_multi devi…
• CVE-2018-5768A remote, unauthenticated attacker can gain remote code exec…
• CVE-2018-5770An issue was discovered on Tenda AC15 devices. A remote, una…
• CVE-2018-5772In Exiv2 0.26, there is a segmentation fault caused by uncon…
• CVE-2018-5776WordPress before 4.9.2 has XSS in the Flash fallback files i…
• CVE-2018-5777An issue was discovered in Ipswitch WhatsUp Gold before 2017…
• CVE-2018-5778An issue was discovered in Ipswitch WhatsUp Gold before 2017…
• CVE-2018-5779A vulnerability in the conferencing component of Mitel Conne…
• CVE-2018-5780A vulnerability in the conferencing component of Mitel Conne…
• CVE-2018-5781A vulnerability in the conferencing component of Mitel Conne…