Description
Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter.
Remediation
References
https://github.com/pandao/editor.md/issues/700
Related Vulnerabilities
CVE-2023-22491 Vulnerability in npm package gatsby-transformer-remark
CVE-2022-31108 Vulnerability in npm package mermaid
CVE-2020-28453 Vulnerability in npm package npos-tesseract
CVE-2010-1622 Vulnerability in maven package org.springframework:spring
CVE-2023-29921 Vulnerability in maven package tech.powerjob:powerjob