3 matches found
CVE-2024-33300
Typora v1.0.0 through v1.7 version below Markdown editor has a cross-site scripting XSS vulnerability, which allows attackers to execute arbitrary code by uploading Markdown files...
7.3CVSS6.5AI score0.00552EPSS
SaveExploits1References1
CVE-2024-33300
Typora v1.0.0 through v1.7 version below Markdown editor has a cross-site scripting XSS vulnerability, which allows attackers to execute arbitrary code by uploading Markdown files...
7.3CVSS6.3AI score0.00552EPSS
SaveExploits1References1
CVE-2024-33300
The Typora Markdown editor, versions v1.0.0 through v1.7 , is susceptible to a cross-site scripting (XSS) vulnerability. The root cause is the improper neutralization of input during web page generation, which allows an attacker to execute arbitrary code by uploading malicious Markdown files. To ...
7.3CVSS6.4AI score0.00552EPSS
SaveExploits1References1Affected Software1
20