5ire 跨站脚本漏洞

5ire is a cross-platform desktop AI assistant from the individual developers at Ironben. A cross-site scripting vulnerability exists in 5ire 0.15.2 and earlier versions, which stems from a misconfiguration of the markdown-it-mermaid plugin security that could lead to remote code execution...