2019-03-15 23:00:00
mitre
PUBLISHED
simple-markdown.js in Khan Academy simple-markdown before 0.4.4 allows XSS via a data: or vbscript: URI.