Skip to content
OpenAdvisories

Package · npm

react-marked-markdown

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-m7qm-r2r5-f77q

    Cross-Site Scripting in react-marked-markdown

    All versions of `react-marked-markdown` are vulnerable to cross-site scripting (XSS) via `href` attributes. This is exploitable if user is provided to `react-marked-markdown` Proof of concept: ``` import React from 'react' import ReactDOM from 'react-dom' imp…

    react-marked-markdown npm