Description
SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via certain input with [ and ( characters, which is mishandled during construction of an A element.
Remediation
References
https://github.com/sparksuite/simplemde-markdown-editor/issues/721
Related Vulnerabilities
CVE-2021-32738 Vulnerability in npm package stellar-sdk
CVE-2023-29214 Vulnerability in maven package org.xwiki.platform:xwiki-platform-panels-ui
CVE-2021-21141 Vulnerability in npm package electron
CVE-2022-41919 Vulnerability in npm package fastify
CVE-2020-7701 Vulnerability in npm package madlib-object-utils