Description
pandao Editor.md 1.5.0 allows XSS via the Javascript: string.
Remediation
References
https://github.com/pandao/editor.md/issues/709
Related Vulnerabilities
CVE-2021-25646 Vulnerability in maven package org.apache.druid:druid-core
CVE-2022-36893 Vulnerability in maven package org.jenkins-ci.plugins:rpmsign-plugin
CVE-2020-7638 Vulnerability in npm package confinit
CVE-2019-10788 Vulnerability in npm package im-metadata
CVE-2022-24196 Vulnerability in maven package com.itextpdf:itext7-core