Trix 跨站脚本漏洞

Trix is a Basecamp open source rich text editor for everyday writing. A cross-site scripting vulnerability exists in versions prior to Trix 2.1.15, which stems from vulnerability to cross-site scripting attacks when pasting malicious code...

MarkText 跨站脚本漏洞

MarkText is a simple and elegant open source Markdown editor focused on speed and usability. A security vulnerability exists in MarkText version 0.17.1, originating in the src/muya/lib/contentState/pasteCtrl.js file, which can be exploited by copying and pasting text from a malicious web page int...