Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/29 6:50 p.m.10 views

EEF-CVE-2026-53427 Cross-site scripting in MDEx via unescaped highlight_lines_class code-fence attribute

Summary Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in leandrocp MDEx allows stored or reflected cross-site scripting via attacker-controlled Markdown. When syntax highlighting and full info-string forwarding render: \full\info\string: true\ ar...

2.3CVSS5.8AI score0.00405EPSS
SaveExploits0References5
Rows per page
Query Builder