Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
marktext marktext vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-2318
DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in the context of MarkText main window. This vulnerability can be exploited if a user copies text from a malicious webpage and...
Marktext Marktext
NA
CVE-2023-1004
A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component WSH JScript Handler. The manipulation leads to code injection. Local access is required to approach this atta...
Marktext Marktext
312
VMScore
CVE-2022-21158
A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper handling of the link (with javascript: scheme) inside the document may allow an malicious user to execute an arbitrary script on the PC of the user using marktext.
Marktext Marktext
605
VMScore
CVE-2022-25069
Mark Text v0.16.3 exists to contain a DOM-based cross-site scripting (XSS) vulnerability which allows malicious users to perform remote code execution (RCE) via injecting a crafted payload into /lib/contentState/pasteCtrl.js.
Marktext Marktext 0.16.3
605
VMScore
CVE-2022-24123
MarkText up to and including 0.16.3 does not sanitize the input of a mermaid block before rendering. This could lead to Remote Code Execution via a .md file containing a mutation Cross-Site Scripting (XSS) payload.
Marktext Marktext
605
VMScore
CVE-2021-29996
Mark Text up to and including 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution (RCE) by opening .md files containing a mutation Cross Site Scripting (XSS) payload.
Marktext Marktext
605
VMScore
CVE-2020-27176
Mutation XSS exists in Mark Text up to and including 0.16.2 that leads to Remote Code Execution. NOTE: this might be considered a duplicate of CVE-2020-26870; however, it can also be considered an issue in the design of the "source code mode" feature, which parses HTML ...
Marktext Marktext
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-0044
client side
CVE-2021-47601
deserialization
CVE-2024-34994
encryption
CVE-2021-47609
CVE-2024-37079
CVE-2024-38608
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started