CVE-2023-34245: Improper Neutralization of Input During Web Page Generation

@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Affected versions of the link plugin and link UI component do not sanitize URLs to prevent use of the javascript: scheme. As a result, links with JavaScript URLs can be inserted into th...

PT-2023-24769

Name of the Vulnerable Software and Affected Versions @udecode/plate-link versions prior to 20.0.0 Description The issue arises from the lack of URL sanitization in affected versions of the link plugin and link UI component, allowing links with JavaScript URLs to be inserted into the Plate editor...