Description
Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter.
Remediation
References
https://github.com/pandao/editor.md/issues/700
Related Vulnerabilities
CVE-2021-41184 Vulnerability in maven package org.webjars.npm:jquery-ui
CVE-2021-26920 Vulnerability in maven package org.apache.druid:druid-core
CVE-2011-4969 Vulnerability in maven package org.webjars.bower:jquery
CVE-2018-16485 Vulnerability in npm package m-server
CVE-2021-23416 Vulnerability in npm package curly-bracket-parser