Description
docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the " character.
Remediation
References
https://github.com/docsifyjs/docsify/issues/1549
Related Vulnerabilities
CVE-2021-3827 Vulnerability in maven package org.keycloak:keycloak-server-spi-private
CVE-2021-3810 Vulnerability in npm package code-server
CVE-2021-21165 Vulnerability in maven package org.webjars.npm:electron
CVE-2021-21160 Vulnerability in npm package electron
CVE-2020-15087 Vulnerability in maven package io.prestosql:presto-main