Description
Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text.
Remediation
References
https://github.com/pandao/editor.md/issues/985
Related Vulnerabilities
CVE-2023-2972 Vulnerability in npm package @antfu/utils
CVE-2023-31101 Vulnerability in maven package org.apache.inlong:manager-service
CVE-2022-0155 Vulnerability in npm package follow-redirects
CVE-2018-16487 Vulnerability in maven package org.webjars.bower:lodash
CVE-2020-28500 Vulnerability in maven package org.webjars.bowergithub.lodash:lodash