CVE-2017-7251

Pi Engine vulnerability CVE-2017-7251 affects pi-engine/pi 2.5.0. The issue arises from insufficient filtration of user-supplied data in the preview path (pi-develop/www/script/editor/markitup/preview/markdown.php), allowing an attacker to execute arbitrary HTML and script code in a victim browse...