Advisories for Npm/Simditor package

Simditor allows DOM XSS via an onload attribute within a malformed SVG element.

Simditor allows XSS via crafted use of svg/onload=alert in a TEXTAREA element.