Etherpad Lite vulnerabilities

• etherpad lite Etherpad Lite before 1.6.4 is exploitable for admin access. CVE-2018-9845 EPSS 12.7% 9.8 CriticalApril 29, 2018
• etherpad lite static/js/pad_utils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href. CVE-2018-6834 6.1 MediumFebruary 8, 2018