Summary: CodiMD 1.3.1, when Safari is used, allows XSS via an IFRAME element with allow-top-navigation in the sandbox attribute, in conjunction with a data: URL.Published: Friday, August 23, 2019 - 00:15cvss:
Italiano
English