interfaces/markdown/input.vue in Directus 7 Application prior to 7.7.0 does not sanitize Markdown text before rendering a preview.
rangerstudio directus 7