Description
SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via certain input with [ and ( characters, which is mishandled during construction of an A element.
Remediation
References
https://github.com/sparksuite/simplemde-markdown-editor/issues/721
Related Vulnerabilities
CVE-2021-32730 Vulnerability in maven package org.xwiki.platform:xwiki-platform-administration-ui
CVE-2018-20318 Vulnerability in maven package com.github.binarywang:weixin-java-common
CVE-2019-10785 Vulnerability in maven package org.webjars.bower:dojox
CVE-2021-45456 Vulnerability in maven package org.apache.kylin:kylin-server-base