| Package | Affected versions | Patched versions |
|---|---|---|
| codimd | = 1.3.1 |
CodiMD 1.3.1, when Safari is used, allows XSS via an IFRAME element with allow-top-navigation in the sandbox attribute, in conjunction with a data: URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free