Cross-Site Scripting (XSS)

@theia/preview is vulnerable to cross-site scripting. An attacker is able to inject and execute arbitrary Javascript in a victim's browser via the markdown preview...

CVE-2020-27224

In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview @theia/preview, can be exploited to execute arbitrary code...

PT-2021-11320

Name of the Vulnerable Software and Affected Versions: Eclipse Theia versions up to and including 1.2.0 Description: The issue allows for the execution of arbitrary code through the Markdown Preview @theia/preview in Eclipse Theia. Recommendations: For Eclipse Theia versions up to and including...

CVE-2020-27224: Improper Neutralization of Input During Web Page Generation

In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview @theia/preview, can be exploited to execute arbitrary code...