Description
docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the " character.
Remediation
References
https://github.com/docsifyjs/docsify/issues/1549
Related Vulnerabilities
CVE-2022-1291 Vulnerability in maven package org.webjars.bowergithub.hhurz:tableexport.jquery.plugin
CVE-2018-8108 Vulnerability in npm package bui
CVE-2020-16024 Vulnerability in maven package org.webjars.npm:electron
CVE-2023-24163 Vulnerability in maven package cn.hutool:hutool-all
CVE-2023-39015 Vulnerability in maven package us.codecraft:webmagic-extension