Remarkable Cross-Site Scripting Vulnerability

markdown is a Markdown parser. A cross-site scripting vulnerability exists in versions prior to remarkable 1.4.1, which stems from the program failing to properly whitelist link protocols. A remote attacker can exploit this vulnerability to inject content...

PT-2018-4154

Name of the Vulnerable Software and Affected Versions remarkable versions 1.4.0 and earlier Description The issue allows certain input to bypass the bad protocol check, enabling javascript: URLs to be injected into the rendered content. This occurs due to improper whitelisting of link protocols i...