Description
docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the " character.
Remediation
References
https://github.com/docsifyjs/docsify/issues/1549
Related Vulnerabilities
CVE-2023-34092 Vulnerability in npm package vite
CVE-2016-3081 Vulnerability in maven package org.apache.struts:struts2-core
CVE-2019-10770 Vulnerability in maven package io.ratpack:ratpack-core
CVE-2014-0168 Vulnerability in maven package org.jolokia:jolokia-core
CVE-2020-28246 Vulnerability in maven package org.webjars.npm:formio