2025-04-20 00:00:00
mitre
PUBLISHED
QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.