Name of the Vulnerable Software and Affected Versions diagram-js-direct-editing versions prior to 1.4.3

Description The issue arises from the package's failure to sanitize input from the clipboard, allowing attackers to execute arbitrary JavaScript in the victim's browser, thus facilitating Cross-Site Scripting attacks.

Recommendations Upgrade to version 1.4.3 or later.