CVE-2023-30792
Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks in cases where input was...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks in cases where input was being parsed from untrusted sources.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web github.com