Closed ktchu closed 3 years ago
A known XSS vulnerability exists in versions of MathJax prior to 2.7.4.
https://www.cvedetails.com/cve/CVE-2018-1999024/
From the source code, it looks like MathJax is 2.7.2 is currently being used.
Thanks, didn't know that, I'll have to update it on next release.
MathJax was updated to v2.7.9 in v4.0 of the extension.
A known XSS vulnerability exists in versions of MathJax prior to 2.7.4.
https://www.cvedetails.com/cve/CVE-2018-1999024/
From the source code, it looks like MathJax is 2.7.2 is currently being used.