Description
Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags.
Remediation
References
Related Vulnerabilities
Roundcube Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-19205)
SharePoint CVE-2023-36762 Vulnerability (CVE-2023-36762)
Java Unspesificed Vulnerability (CVE-2019-2422)
Joomla! Core 3.x.x Cross-Site Request Forgery (3.7.0 - 3.9.19)
WordPress Plugin BetterLinks-Shorten, Track and Manage any URL Cross-Site Scripting (1.2.5)