Description
An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file.
Remediation
References
https://github.com/xCss/Valine/issues/127
Related Vulnerabilities
CVE-2020-7656 Vulnerability in maven package org.fujion.webjars:jquery
CVE-2020-26282 Vulnerability in maven package com.browserup:browserup-proxy-rest
CVE-2016-7103 Vulnerability in maven package org.webjars:jquery-ui
CVE-2021-21266 Vulnerability in maven package org.openhab.addons.bundles:org.openhab.binding.insteon