CVE-2019-9844: Fedoraproject Fedora

Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days.

simple-markdown.js in Khan Academy simple-markdown before 0.4.4 allows XSS via a data: or vbscript: URI.

Affected products

• Fedoraproject Fedora: version 30 only
• Khanacademy Simple-Markdown: before 0.4.4 (fixed in 0.4.4)

Published 2019-04-09. Last modified 2026-06-17.