WS-2019-0025

Versions 0.3.7 and earlier of marked When mangling is disabled via option mangle don't escape target href are vulnerable to XSS, which allows an attacker to inject arbitrary code...

PT-2021-24468

Name of the Vulnerable Software and Affected Versions: marked versions 0.3.7 and earlier Description: The issue allows an attacker to inject arbitrary HTML events into the resulting a tag when mangling is disabled via the mangle option. This occurs because the target href is not escaped...