CVE-2022-25069

Mark Text v0.16.3 was discovered to contain a DOM-based cross-site scripting XSS vulnerability which allows attackers to perform remote code execution RCE via injecting a crafted payload into /lib/contentState/pasteCtrl.js...

CVE-2022-25069

Mark Text v0.16.3 contains a DOM-based XSS vulnerability in /lib/contentState/pasteCtrl.js that can lead to remote code execution (RCE). Root cause: DOM-based XSS in pasteCtrl.js allows crafted payloads to be executed. Impact: high/critical (CVSS3.1 base score 9.6) with network access and user in...

PT-2022-17067

Name of the Vulnerable Software and Affected Versions Mark Text version 0.16.3 Description A DOM-based cross-site scripting XSS issue allows attackers to perform remote code execution RCE by injecting a crafted payload into /lib/contentState/pasteCtrl.js. This enables attackers to execute malicio...