Description
pandao Editor.md 1.5.0 allows XSS via the Javascript: string.
Remediation
References
https://github.com/pandao/editor.md/issues/709
Related Vulnerabilities
CVE-2020-28469 Vulnerability in npm package glob-parent
CVE-2015-1840 Vulnerability in npm package jquery-ujs
CVE-2023-29922 Vulnerability in maven package tech.powerjob:powerjob
CVE-2021-21428 Vulnerability in maven package org.openapitools:openapi-generator-online
CVE-2023-43643 Vulnerability in maven package org.owasp.antisamy:antisamy