Name of the Vulnerable Software and Affected Versions ngx-md versions prior to 6.0.3

Description The issue allows for Cross-Site Scripting due to improper restriction of links to http/https, which can contain JavaScript and lead to arbitrary code execution. For example, Markdown input such as [Click Me](javascript:alert('Injected!'%29) is rendered as a link that executes JavaScript when clicked.

Recommendations Upgrade to version 6.0.3 or later.