WS-2020-0040

The package discord-markdown allows any website using it with a user-generated markdown to be vulnerable to code injection via the page where the markdown is displayed...

Cross-Site Scripting (XSS)

discord-markdown is vulnerable to cross-site scripting XSS. The markdown is not properly sanitized, allowing injection of arbitrary Javascript into any website using discord-markdown with user-generated markdown...

PT-2020-21207

Name of the Vulnerable Software and Affected Versions discord-markdown versions prior to 2.3.1 Description The issue affects websites that use discord-markdown with user-generated markdown, making them susceptible to code injection where the markdown is displayed. Recommendations For versions pri...