Name of the Vulnerable Software and Affected Versions htmr versions prior to 0.8.7

Description The issue arises from the use of innerHTML to unescape HTML entities, potentially leading to DOM-based XSS attacks through HTML-encoded XSS payloads. This could allow an attacker to execute arbitrary JavaScript in a victim's browser.

Recommendations Upgrade to version 0.8.7 or later.