Description
docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the " character.
Remediation
References
https://github.com/docsifyjs/docsify/issues/1549
Related Vulnerabilities
CVE-2020-20913 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2022-1330 Vulnerability in maven package org.webjars.bower:fullpage
CVE-2022-25898 Vulnerability in npm package jsrsasign
CVE-2023-1584 Vulnerability in maven package io.quarkus:quarkus-oidc
CVE-2022-25912 Vulnerability in maven package org.webjars.npm:simple-git