Description
SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via certain input with [ and ( characters, which is mishandled during construction of an A element.
Remediation
References
https://github.com/sparksuite/simplemde-markdown-editor/issues/721
Related Vulnerabilities
CVE-2022-35144 Vulnerability in npm package raneto
CVE-2020-7779 Vulnerability in npm package djvalidator
CVE-2020-14967 Vulnerability in npm package jsrsasign
CVE-2021-31406 Vulnerability in maven package com.vaadin:flow-server
CVE-2018-14041 Vulnerability in maven package org.webjars.bowergithub.twbs:bootstrap