Description
docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the " character.
Remediation
References
https://github.com/docsifyjs/docsify/issues/1549
Related Vulnerabilities
CVE-2022-31160 Vulnerability in maven package org.webjars.npm:jquery-ui
CVE-2023-47324 Vulnerability in maven package org.silverpeas.core:silverpeas-core-web
CVE-2019-10749 Vulnerability in npm package sequelize
CVE-2023-1370 Vulnerability in maven package net.minidev:json-smart
CVE-2023-34624 Vulnerability in maven package net.sourceforge.htmlcleaner:htmlcleaner