Lucene search
+L

2 matches found

OSV
OSV
added 2024/12/26 8:56 p.m.11 views

CVE-2024-56510 Marp Core allows XSS by improper neutralization of HTML sanitization

@marp-team/marp-core is the core for Marp, which is the ecosystem to write your presentation with plain Markdown. Marp Core from v3.0.2 to v3.9.0 and v4.0.0, are vulnerable to cross-site scripting XSS due to improper neutralization of HTML sanitization. Marp Core v3.9.1 and v4.0.1 have been patch...

5.3CVSS5.9AI score
SaveExploits0References7
CVE
CVE
added 2024/12/26 8:56 p.m.89 views

CVE-2024-56510

Marp Core vulnerability CVE-2024-56510 affects Marp Core versions from v3.0.2 to v3.9.0 and v4.0.0, where improper neutralization of HTML sanitization leads to Cross-Site Scripting (XSS). The issue is addressed in Marp Core v3.9.1 and v4.0.1. If immediate upgrading is not feasible, a workaround i...

5.3CVSS5.4AI score0.00313EPSS
SaveExploits0References5
Rows per page
Query Builder