Description
SimpleMDE 1.11.2 has XSS via an onerror attribute of a crafted IMG element, or via certain input with [ and ( characters, which is mishandled during construction of an A element.
Remediation
References
https://github.com/sparksuite/simplemde-markdown-editor/issues/721
Related Vulnerabilities
CVE-2022-41930 Vulnerability in maven package org.xwiki.platform:xwiki-platform-user-profile-ui
CVE-2023-45818 Vulnerability in npm package tinymce
CVE-2013-1880 Vulnerability in maven package org.apache.activemq:activemq-web
CVE-2021-29060 Vulnerability in npm package color-string
CVE-2017-12617 Vulnerability in maven package org.apache.tomcat:catalina