Description
Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter.
Remediation
References
https://github.com/pandao/editor.md/issues/700
Related Vulnerabilities
CVE-2020-9489 Vulnerability in maven package org.apache.tika:tika-parsers
CVE-2020-13942 Vulnerability in maven package org.apache.unomi:unomi-persistence-elasticsearch-core
CVE-2022-25869 Vulnerability in maven package org.webjars.bower:angular
CVE-2021-43138 Vulnerability in npm package async
CVE-2023-34092 Vulnerability in maven package org.webjars.npm:vite