CVE-2025-56683

A cross-site scripting XSS vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README.md file...

CVE-2025-56683

CVE-2025-56683 is a documented XSS in Logseq v0.10.9. The vulnerability lies in the /app/marketplace.html component, where an attacker can inject arbitrary Javascript via a crafted README.md file, leading to potential remote code execution. Multiple sources (NVD, Red Hat, OSV) describe the same e...