PT-2023-11525 · Editor.Md · Editor.Md

Name of the Vulnerable Software and Affected Versions: editor.md version 1.5.0 Description: The issue allows attackers to execute arbitrary code via crafted linked url values, which is a Cross Site Scripting XSS attack. This enables attackers to inject malicious scripts into websites, potentially...

Design/Logic Flaw

Editor.md 1.5.0 has DOM-based XSS via vectors involving the 'EMBED SRC="data:image/svg+xml' substring...