CVE-2026-54701

The Markdown Preview Enhanced extension for Visual Studio Code is vulnerable to Stored XSS in versions prior to 0.8.30 . The extension improperly handles repository-controlled content from .crossnote/head.html by passing it through resolvePathsInHeader and inserting it into the webview head witho...