CVE-2022-24123

MarkText through 0.16.3 does not sanitize the input of a mermaid block before rendering. This could lead to Remote Code Execution via a .md file containing a mutation Cross-Site Scripting XSS payload...

CVE-2022-24123

CVE-2022-24123 affects MarkText up to version 0.16.3, where input in a mermaid block is not sanitized before rendering. This can lead to Remote Code Execution via a mutation XSS payload in a Markdown file. The available connected documents confirm the issue and its risk posture (network-based, hi...

CVE-2022-24123

MarkText through 0.16.3 does not sanitize the input of a mermaid block before rendering. This could lead to Remote Code Execution via a .md file containing a mutation Cross-Site Scripting XSS payload...