Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
marktext marktext 0.16.3 vulnerabilities and exploits
(subscribe to this query)
9.6
CVSSv3
CVE-2022-25069
Mark Text v0.16.3 exists to contain a DOM-based cross-site scripting (XSS) vulnerability which allows malicious users to perform remote code execution (RCE) via injecting a crafted payload into /lib/contentState/pasteCtrl.js.
Marktext Marktext 0.16.3
9
CVSSv3
CVE-2022-24123
MarkText up to and including 0.16.3 does not sanitize the input of a mermaid block before rendering. This could lead to Remote Code Execution via a .md file containing a mutation Cross-Site Scripting (XSS) payload.
Marktext Marktext
9.6
CVSSv3
CVE-2021-29996
Mark Text up to and including 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution (RCE) by opening .md files containing a mutation Cross Site Scripting (XSS) payload.
Marktext Marktext
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
deserialization
CVE-2024-4541
CVE-2024-3080
CVE-2024-4787
log injection
CVE-2024-5967
inject
CVE-2024-30078
CVE-2024-5899
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started