Description
docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the " character.
Remediation
References
https://github.com/docsifyjs/docsify/issues/1549
Related Vulnerabilities
CVE-2020-28500 Vulnerability in npm package lodash
CVE-2020-19698 Vulnerability in npm package editor.md
CVE-2020-7663 Vulnerability in npm package websocket-extensions
CVE-2023-0410 Vulnerability in npm package @builder.io/qwik
CVE-2020-7760 Vulnerability in maven package org.webjars.bower:codemirror