EUVD-2025-35707

Piranha CMS vulnerable to stored cross-site scripting XSS...

CVE-2025-61413

CVE-2025-61413 concerns a stored XSS in Piranha CMS v12.0 within the /manager/pages component. The vulnerability arises when user-supplied input injected into Markdown blocks is not properly sanitized, allowing an attacker to create a page containing a crafted payload that can execute arbitrary w...

Discourse: Application Level DoS - Large Markdown Payload in Reply Section Leading to Resource Exhaustion

A Denial of Service DoS vulnerability was identified in the reply section of the web application. Submitting an excessively large markup payload approximately 800,000 characters resulted in the server taking 30 seconds to respond before returning an HTTP/2 502 Bad Gateway error, indicating...

CVE-2022-24656

HexoEditor 1.1.8 is affected by Cross Site Scripting XSS. By putting a common XSS payload in a markdown file, if opened with the app, will execute several times...