Cross-Site Scripting (XSS)

@theia/preview is vulnerable to cross-site scripting. An attacker is able to inject and execute arbitrary Javascript in a victim's browser via the markdown preview...

CVE-2020-27224

In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview @theia/preview, can be exploited to execute arbitrary code...

@theia/plantuml (>=0.1.0, <=0.1.7) potentially affected by CVE-2020-27224 via @theia/preview (>=0.3.3, <=0.3.19)

@theia/preview NPM version =0.3.3, =0.1.0, =0.1.7 Source cves: CVE-2020-27224 Source advisory: MEND:CVE-2020-27224...

CVE-2020-27224: Improper Neutralization of Input During Web Page Generation

In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview @theia/preview, can be exploited to execute arbitrary code...

PT-2021-11320

Name of the Vulnerable Software and Affected Versions: Eclipse Theia versions up to and including 1.2.0 Description: The issue allows for the execution of arbitrary code through the Markdown Preview @theia/preview in Eclipse Theia. Recommendations: For Eclipse Theia versions up to and including...