Description
SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via certain input with [ and ( characters, which is mishandled during construction of an A element.
Remediation
References
https://github.com/sparksuite/simplemde-markdown-editor/issues/721
Related Vulnerabilities
CVE-2018-20059 Vulnerability in maven package ro.pippo:pippo-jaxb
CVE-2021-23543 Vulnerability in npm package realms-shim
CVE-2020-28451 Vulnerability in npm package image-tiler
CVE-2021-23344 Vulnerability in npm package total.js
CVE-2022-32287 Vulnerability in maven package org.apache.uima:uimaj-core