Description
pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element.
Remediation
References
https://github.com/pandao/editor.md/issues/715
Related Vulnerabilities
CVE-2020-28436 Vulnerability in npm package google-cloudstorage-commands
CVE-2021-41097 Vulnerability in npm package aurelia-path
CVE-2016-5005 Vulnerability in maven package org.apache.archiva:archiva-webapp
CVE-2022-21681 Vulnerability in npm package marked
CVE-2023-37263 Vulnerability in npm package @strapi/plugin-content-manager