Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
marktext marktext vulnerabilities and exploits
(subscribe to this query)
9.6
CVSSv3
CVE-2023-2318
DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in the context of MarkText main window. This vulnerability can be exploited if a user copies text from a malicious webpage and...
Marktext Marktext
9.6
CVSSv3
CVE-2020-27176
Mutation XSS exists in Mark Text up to and including 0.16.2 that leads to Remote Code Execution. NOTE: this might be considered a duplicate of CVE-2020-26870; however, it can also be considered an issue in the design of the "source code mode" feature, which parses HTML ...
Marktext Marktext
7.8
CVSSv3
CVE-2023-1004
A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component WSH JScript Handler. The manipulation leads to code injection. Local access is required to approach this atta...
Marktext Marktext
5.4
CVSSv3
CVE-2022-21158
A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper handling of the link (with javascript: scheme) inside the document may allow an malicious user to execute an arbitrary script on the PC of the user using marktext.
Marktext Marktext
9.6
CVSSv3
CVE-2021-29996
Mark Text up to and including 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution (RCE) by opening .md files containing a mutation Cross Site Scripting (XSS) payload.
Marktext Marktext
9
CVSSv3
CVE-2022-24123
MarkText up to and including 0.16.3 does not sanitize the input of a mermaid block before rendering. This could lead to Remote Code Execution via a .md file containing a mutation Cross-Site Scripting (XSS) payload.
Marktext Marktext
9.6
CVSSv3
CVE-2022-25069
Mark Text v0.16.3 exists to contain a DOM-based cross-site scripting (XSS) vulnerability which allows malicious users to perform remote code execution (RCE) via injecting a crafted payload into /lib/contentState/pasteCtrl.js.
Marktext Marktext 0.16.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32886
insecure direct object reference
CVE-2024-34342
file inclusion
CVE-2024-34562
CVE-2024-34347
CVE-2024-26026
CVE-2024-4647
unprivileged
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started