vditor prior to version 3.8.11 is vulnerable to cross-site scripting. References https://nvd.nist.gov/vuln/detail/CVE-2022-0341 https://github.com/vanessa219/vditor/commit/219f8a9e272aba3cbc0096a82cac776532dbb9e5 https://huntr.dev/bounties/fa546b57-bc15-4705-824e-9474b616f628 https://github.com/Vanessa219/vditor/issues/1102 https://github.com/advisories/GHSA-pq37-4c4g-v38c