CVE-2025-56683

A cross-site scripting XSS vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README.md file...

CVE-2025-56683

A cross-site scripting XSS vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README.md file...

CVE-2025-56683

A cross-site scripting XSS vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README.md file...

CVE-2025-56683

CVE-2025-56683 is a documented XSS in Logseq v0.10.9. The vulnerability lies in the /app/marketplace.html component, where an attacker can inject arbitrary Javascript via a crafted README.md file, leading to potential remote code execution. Multiple sources (NVD, Red Hat, OSV) describe the same e...

EUVD-2025-33349

A cross-site scripting XSS vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README.md file...

PT-2025-41390

Name of the Vulnerable Software and Affected Versions Logseq version 0.10.9 Description A cross-site scripting XSS issue exists in Logseq. The flaw is located in the /app/marketplace.html component and allows for the execution of arbitrary code. This is achieved by injecting Javascript into a...

CVE-2025-56683

A cross-site scripting XSS vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README.md file...

Logseq 安全漏洞

Logseq is a knowledge management and collaboration platform from Logseq Open Source. A security vulnerability exists in Logseq version 0.10.9, which stems from the mishandling of arbitrary Javascript code in the specially crafted README.md file by the component /app/marketplace.html, which could...

CVE-2025-56683

A cross-site scripting XSS vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README.md file...