XSS payload: [XSS](javascript:alert`1`)

sparksuite / simplemde-markdown-editor

A simple, beautiful, and embeddable JavaScript Markdown editor. Delightful editing for beginners and experts alike. Features built-in autosaving and spell checking.

https://simplemde.com

MIT License

9.89k stars 1.12k forks source link

XSS payload: [XSS](javascript:alert`1`) #787

Open PhHitachi opened 4 years ago

PhHitachi commented 4 years ago

hi,

i want to report xss issue

this the payload XSS