Filtered by vendor Markdown-to-jsx Subscriptions
Filtered by product Markdown-to-jsx Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-21535 2 Markdown-to-jsx, Quantizor 2 Markdown-to-jsx, Markdown-to-jsx 2024-10-17 6.1 Medium
Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting (XSS) via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown.