Description
SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via certain input with [ and ( characters, which is mishandled during construction of an A element.
Remediation
References
https://github.com/sparksuite/simplemde-markdown-editor/issues/721
Related Vulnerabilities
CVE-2023-47324 Vulnerability in maven package org.silverpeas.core:silverpeas-core-war
CVE-2021-21366 Vulnerability in maven package org.webjars.npm:xmldom
CVE-2020-35213 Vulnerability in maven package io.atomix:atomix
CVE-2016-10735 Vulnerability in maven package ua.mobius.media:bootstrap
CVE-2020-27543 Vulnerability in npm package restify-paginate