Cross-site Scripting (XSS)

markdown-it-toc is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of the title of the generated toc and the contents of the header allowing an attacker to inject maliciously crafted script into the system.