Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
marktext marktext 0.16.3 vulnerabilities and exploits
(subscribe to this query)
9.6
CVSSv3
CVE-2022-25069
Mark Text v0.16.3 exists to contain a DOM-based cross-site scripting (XSS) vulnerability which allows malicious users to perform remote code execution (RCE) via injecting a crafted payload into /lib/contentState/pasteCtrl.js.
Marktext Marktext 0.16.3
9.6
CVSSv3
CVE-2021-29996
Mark Text up to and including 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution (RCE) by opening .md files containing a mutation Cross Site Scripting (XSS) payload.
Marktext Marktext
9
CVSSv3
CVE-2022-24123
MarkText up to and including 0.16.3 does not sanitize the input of a mermaid block before rendering. This could lead to Remote Code Execution via a .md file containing a mutation Cross-Site Scripting (XSS) payload.
Marktext Marktext
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
cross-site scripting
CVE-2024-5158
XML external entity
CVE-2024-4262
CVE-2024-2036
CVE-2024-4985
CVE-2024-21791
remote attackers
CVE-2023-43208
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started