Description
Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.12.
Remediation
References
https://github.com/vanessa219/vditor/commit/219f8a9e272aba3cbc0096a82cac776532dbb9e5
https://huntr.dev/bounties/fa546b57-bc15-4705-824e-9474b616f628
Related Vulnerabilities
CVE-2014-9970 Vulnerability in maven package org.jasypt:jasypt
CVE-2020-36319 Vulnerability in maven package com.vaadin:flow-server
CVE-2022-27139 Vulnerability in npm package ghost
CVE-2021-43308 Vulnerability in npm package markdown-link-extractor
CVE-2019-9154 Vulnerability in maven package org.webjars.npm:openpgp