CVE-2017-6589

The CVE-2017-6589 vulnerability affects EpicEditor up to version 0.2.3, arising from an insecure default configuration of marked.js that does not escape input. This allows cross-site scripting via crafted HTML (e.g., an image tag) in previews rendered by the editor. Public references (including G...