CVE-2026-129170

FileCodeBox versions 2.2.1 through 2.8.4 are vulnerable to a stored cross-site scripting (XSS) vulnerability within the renderMarkdownPreview function. The root cause is an improper handling of errors where the markdown parser throws an exception, causing the application to return unsanitized tex...