Docsify · Docsify · CVE-2021-30074
**Name of the Vulnerable Software and Affected Versions**
docsify versions 4.12.1 and earlier
**Description**
The issue arises from the search component's failure to properly encode Code Blocks and its mishandling of the `"` character, leading to Cross Site Scripting (XSS).
**Recommendations**
For versions 4.12.1 and earlier, consider disabling the search component until a patch is available to prevent potential XSS attacks. Restrict access to the search functionality to minimize the risk of exploitation. Avoid using the search feature with user-supplied input until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.