CVE-2020-18748

Cross Site Scripting XSS in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration error in the mathematical formula blocks. This is a different vulnerability from CVE-2020-18221...

CVE-2020-18748

Cross Site Scripting XSS in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration error in the mathematical formula blocks. This is a different vulnerability from CVE-2020-18221...

CVE-2020-18748

CVE-2020-18748 affects Typora (v0.9.65 and potentially earlier per context) with a Cross-Site Scripting (XSS) vulnerability caused by a mathjax configuration error in mathematical formula blocks, enabling arbitrary code execution via crafted MathJax syntax. Connected sources corroborate Typora-sp...