MEDIUM6.1
GHSA-5q54-8p9j-x74j
Cross-site Scripting in pandao editor.md
Details
pandao Editor.md 1.5.0 allows XSS via the Javascript: string.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/editor.md
No fixed version published yet for editor.md (npm). Pin to a known-safe version or switch to an alternative.