Description
markdown-it before 4.1.0 does not block data: URLs.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Photo Gallery by Gallery Bank Cross-Site Scripting (3.0.228)
WordPress Plugin Gallery by BestWebSoft 'php.php' Arbitrary File Upload (3.06)
MySQL CVE-2021-2232 Vulnerability (CVE-2021-2232)
WordPress Plugin eventON Multiple Cross-Site Scripting Vulnerabilities (2.6.11)
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-14540)