CVE-2025-56683

CVE-2025-56683 is a documented XSS in Logseq v0.10.9. The vulnerability lies in the /app/marketplace.html component, where an attacker can inject arbitrary Javascript via a crafted README.md file, leading to potential remote code execution. Multiple sources (NVD, Red Hat, OSV) describe the same e...