Cross-site Scripting (XSS)

Overview markdown2 is a fast and complete Python implementation of Markdown. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the dolinkpatterns method within the Markdown class in lib/markdown2.py file, which insufficiently sanitizes image URLs. An attacker can...