PT-2021-24468

Name of the Vulnerable Software and Affected Versions: marked versions 0.3.7 and earlier Description: The issue allows an attacker to inject arbitrary HTML events into the resulting a tag when mangling is disabled via the mangle option. This occurs because the target href is not escaped...