7 matches found
CVE-2024-41481
Typora before 1.9.3 Markdown editor has a cross-site scripting XSS vulnerability via the Mermaid component...
CVE-2024-41481
Typora before 1.9.3 Markdown editor has a cross-site scripting XSS vulnerability via the Mermaid component...
CVE-2024-41481
Typora before 1.9.3 Markdown editor has a cross-site scripting XSS vulnerability via the Mermaid component...
CVE-2024-41481
Typora before 1.9.3 Markdown editor has a cross-site scripting XSS vulnerability via the Mermaid component...
CVE-2024-41481
CVE-2024-41481 – Typora prior to 1.9.3 has an XSS vulnerability via the Mermaid component. The issue arises when Mermaid diagrams are rendered, potentially allowing injected scripts in Typora-rendered content. The vulnerability is described as requiring user interaction with a network-origin vect...
CVE-2024-41481
Typora before 1.9.3 Markdown editor has a cross-site scripting XSS vulnerability via the Mermaid component...
PT-2023-29863 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.1.3 Discourse versions prior to 3.2.0.beta3 Description: Discourse is an open source platform for community discussion. The issue affects the availability of subsequent replies in a topic when users can add svgs...