CVE-2024-40626

Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering process that leads to a Stored Cross-Site Scripting XSS vulnerability in Outline. An authenticated user can create a document containing a malicious JavaScript payload. When other...

CVE-2024-40626

Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering process that leads to a Stored Cross-Site Scripting XSS vulnerability in Outline. An authenticated user can create a document containing a malicious JavaScript payload. When other...

CVE-2024-40626

Outline is affected by a Stored Cross-Site Scripting (XSS) vulnerability caused by a type confusion in ProseMirror’s rendering path. An authenticated user can embed a malicious payload in a document, which executes in other users’ browsers when the document is viewed. The CSP protections can be b...