Description
pandao Editor.md 1.5.0 allows XSS via the Javascript: string.
Remediation
References
https://github.com/pandao/editor.md/issues/709
Related Vulnerabilities
CVE-2023-24188 Vulnerability in maven package com.bstek.ureport:ureport2-core
CVE-2020-29204 Vulnerability in maven package com.xuxueli:xxl-job-admin
CVE-2022-1295 Vulnerability in npm package fullpage.js
CVE-2020-15174 Vulnerability in npm package electron
CVE-2020-28458 Vulnerability in maven package org.webjars.npm:datatables.net