4854 matches found
Markdown-It 安全漏洞
Markdown-It is a Markdown parser from the Markdown it! open source. A security vulnerability exists in Markdown-It version 14.1.0 that stems from improper input neutralization and could lead to cross-site scripting...
Linux Distros Unpatched Vulnerability : CVE-2023-6195
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from...
CVE-2025-49420
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themepassion Ultra Portfolio ultra-portfolio allows Reflected XSS.This issue affects Ultra Portfolio: from n/a through = 6.7...
CVE-2025-49420 WordPress Ultra Portfolio - WordPress Plugin <= 6.7 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themepassion Ultra Portfolio ultra-portfolio allows Reflected XSS.This issue affects Ultra Portfolio: from n/a through = 6.7...
CVE-2025-49420 WordPress Ultra Portfolio - WordPress Plugin <= 6.7 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themepassion Ultra Portfolio ultra-portfolio allows Reflected XSS.This issue affects Ultra Portfolio: from n/a through = 6.7...
CVE-2025-49420
CVE-2025-49420 concerns the WordPress plugin * Ultra Portfolio* (WordPress plugin) with a Cross-Site Scripting (XSS) vulnerability. According to the connected Patchstack/NVD entries, the issue is an improper neutralization of input during web page generation that enables XSS, affecting Ultra Port...
WordPress plugin Markup Markdown 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-33949 · Unknown · Markup Markdown
Name of the Vulnerable Software and Affected Versions: Markup Markdown versions through 3.20.6 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update to a version later than...
WordPress Markup Markdown plugin <= 3.20.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by JeonKim in WordPress Plugin Markup Markdown versions = 3.20.6...
BIT-GITLAB-2025-2937 Inefficient Regular Expression Complexity in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to create a denial of service condition by sending specially crafted markdown payloads to the Wiki feature...
Linux Distros Unpatched Vulnerability : CVE-2024-44337
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion v0.0.0-20240729232818-a2a9c4f...
Linux Distros Unpatched Vulnerability : CVE-2023-3364
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14 before 16.0.8, all versions starting from 16.1 before 16.1.3, all version...
Linux Distros Unpatched Vulnerability : CVE-2024-43805
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on us...
Linux Distros Unpatched Vulnerability : CVE-2023-3994
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions...
Linux Distros Unpatched Vulnerability : CVE-2023-26303
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...
CVE-2025-51691
Cross-Site Scripting XSS vulnerability found in MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 May 2025 allows a remote attacker to execute arbitrary code via a crafted script input to the editor interface. The application does not properly sanitize user-supplied Markdown before renderin...
Malicious code in enif-eclipse-markdown-pdf-phoebe (npm)
The package enif-eclipse-markdown-pdf-phoebe was found to contain malicious code...
Malicious code in markdown-izar-blazar-halley (npm)
The package markdown-izar-blazar-halley was found to contain malicious code...