Name of the Vulnerable Software and Affected Versions markdown-to-jsx versions prior to 6.11.4

Description The issue is related to Cross-Site Scripting due to insufficient input sanitization, allowing the package to render output containing malicious JavaScript. This can be exploited through input of links containing data or VBScript URIs and a base64-encoded payload.

Recommendations Upgrade to version 6.11.4 or later.