[editor.md] Pandao Editor.md vulnerable to cross-site scripting (XSS) in iframe src parameter

Cross-site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script in the <iframe> src parameter.

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-19697
• https://github.com/pandao/editor.md/issues/701
• https://github.com/pandao/editor.md/pull/860
• https://github.com/advisories/GHSA-w974-rq9x-mh3v