GitBook through 2.6.9 allows XSS via a local .md file
By entering script in MD file, it can be executed by gitbook
GitBook 2.6.9
Gitbook储存型xss/media/rId24.png)