Stored XSS via image markdown

Description The site allows creating markdown to get an image from a link, from which we can use it to generate XSS. Proof of Concept Payload: markdown Video: Youtube Only works on Google Chrome...

WS-2022-0245

A stored XSS was discovered in outline/outline 0.65.2 via image markdown. An attacker can exploit the vulnerability by creating a markdown to get an image from a link, which can be used to generate XSS...