EUVD-2025-35707

Piranha CMS vulnerable to stored cross-site scripting XSS...

CVE-2025-61413

Piranha CMS versions v12.0 and v12.1 are vulnerable to a stored cross-site scripting (XSS) flaw within the /manager/pages component. The root cause is the improper sanitization of user-supplied input injected into Markdown blocks . An attacker can exploit this by creating a page and providing a c...

CVE-2025-2937: Inefficient Regular Expression Complexity

An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to create a denial of service condition by sending specially crafted markdown payloads to the Wiki feature...

Discourse: Application Level DoS - Large Markdown Payload in Reply Section Leading to Resource Exhaustion

A Denial of Service DoS vulnerability was identified in the reply section of the web application. Submitting an excessively large markup payload approximately 800,000 characters resulted in the server taking 30 seconds to respond before returning an HTTP/2 502 Bad Gateway error, indicating...

CVE-2022-24656

HexoEditor 1.1.8 is affected by Cross Site Scripting XSS. By putting a common XSS payload in a markdown file, if opened with the app, will execute several times...