CVE-2025-56683

Logseq version 0.10.9 is vulnerable to a cross-site scripting (XSS) flaw in the /app/marketplace.html component. The root cause is the mishandling of arbitrary JavaScript code when processing a specially crafted README.md file. This vulnerability allows attackers to execute arbitrary code on the ...