Design/Logic Flaw

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796...

CVE-2021-28833

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796...

CVE-2021-28833

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796...

CVE-2021-28833

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796...

CVE-2021-28833

Qiita-Markdown (Ruby gem) up to versions before 0.34.0 is vulnerable to cross-site scripting via crafted gist links (CVE-2021-28833). Red Hat advisories and RubySec confirm this as a separate issue from CVE-2021-28796 and describe the same general class of XSS in the transformer/gist handling pat...

PT-2021-17953

Name of the Vulnerable Software and Affected Versions: Qiita::Markdown versions prior to 0.34.0 Description: The issue allows for XSS attacks via a crafted gist link. Recommendations: For versions prior to 0.34.0, update to version 0.34.0 or later to resolve the issue...

Getty104 Qiita::Markdown 跨站脚本漏洞

Getty104 qiita-markdown is Getty104 an open source application . Provides an editor function. A cross-site scripting vulnerability exists in versions prior to Qiita::Markdown 0.34.0, which stems from the program allowing XSS via a crafted gist link...

CVE-2021-28833: Improper Neutralization of Input During Web Page Generation

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796...

OPENSUSE-SU-2021:0895-1 Security update for htmldoc

This update for htmldoc fixes the following issues: Update to version 1.9.12 Fixed buffer-overflow CVE-2021-20308 boo1184424 Fixed a crash bug with 'data:' URIs and EPUB output Fixed several other crash bugs Fixed JPEG error handling Fixed some minor issues Removed the bundled libjpeg, libpng, an...

CVE-2021-26834

A cross-site scripting XSS vulnerability exists in Znote 0.5.2. An attacker can insert payloads, and the code execution will happen immediately on markdown view mode...

CVE-2021-26834

A cross-site scripting XSS vulnerability exists in Znote 0.5.2. An attacker can insert payloads, and the code execution will happen immediately on markdown view mode...

Cross site scripting

A cross-site scripting XSS vulnerability exists in Znote 0.5.2. An attacker can insert payloads, and the code execution will happen immediately on markdown view mode...

CVE-2021-26835

No filtering of cross-site scripting XSS payloads in the markdown-editor in Zettlr 1.8.7 allows attackers to perform remote code execution via a crafted file...

CVE-2021-26835

No filtering of cross-site scripting XSS payloads in the markdown-editor in Zettlr 1.8.7 allows attackers to perform remote code execution via a crafted file...

CVE-2021-26835

No filtering of cross-site scripting XSS payloads in the markdown-editor in Zettlr 1.8.7 allows attackers to perform remote code execution via a crafted file...

CVE-2021-26834

A cross-site scripting XSS vulnerability exists in Znote 0.5.2. An attacker can insert payloads, and the code execution will happen immediately on markdown view mode...

CVE-2021-26835: Improper Neutralization of Input During Web Page Generation

No filtering of cross-site scripting XSS payloads in the markdown-editor in Zettlr 1.8.7 allows attackers to perform remote code execution via a crafted file...

PT-2021-17157

Name of the Vulnerable Software and Affected Versions: Znote version 0.5.2 Description: A cross-site scripting XSS vulnerability exists, allowing an attacker to insert payloads. The code execution will happen immediately on markdown view mode. Recommendations: For Znote version 0.5.2, at the...

Zettlr 跨站脚本漏洞

Zettlr is one of the most comprehensive editors for professional editing of Markdown files. Zettlr 1.8.7 suffers from a cross-site scripting vulnerability that stems from the lack of cross-site scripting XSS payload filtering in the markdown editor. An attacker can exploit this vulnerability to...

PT-2021-17158

Name of the Vulnerable Software and Affected Versions: Zettlr version 1.8.7 Description: The issue is related to the lack of filtering of cross-site scripting XSS payloads in the markdown-editor, allowing attackers to perform remote code execution via a crafted file. Recommendations: For Zettlr...