Description
Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element.
Remediation
References
https://github.com/pandao/editor.md/issues/612
Related Vulnerabilities
CVE-2021-40369 Vulnerability in maven package org.apache.jspwiki:jspwiki-main
CVE-2021-21619 Vulnerability in maven package org.jenkins-ci.plugins:claim
CVE-2021-21368 Vulnerability in maven package org.webjars.npm:msgpack5
CVE-2020-26939 Vulnerability in maven package org.bouncycastle:bcprov-ext-jdk14
CVE-2020-28168 Vulnerability in maven package org.webjars.bower:axios