There is a stored XSS vulnerability

[Sugobet]

When I used this plugin to write MD articles, I encountered a stored XSS vulnerability

Steps to reproduce the behavior:

1. Enable WP Githuber MD v1.16.2 plugin

2. Write new articles (via MD editor of this plugin)

3. Insert the following JS code:（Note that I added Tab spaces！！！）

4. Publish articles

Additional context

（Note that I added Tab spaces！！！），，，As an article, it should not take the content of the article as js code and let the client browser execute it, which is very dangerous and may lead to phishing

Server environment

• WordPress version [ 6.3 ]
• WP Githuber MD plugin version [ 1.16.2 ]
• PHP version [ 7.4 ]

[github-actions[bot]]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 2 days.

[github-actions[bot]]

This issue was closed because it has been inactive for 14 days since being marked as stale.