16 matches found
CVE-2026-40201: Improper Neutralization of Input During Web Page Generation
@diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file...
Claude Code Can Be Manipulated via CLAUDE.md to Run SQL Injection Attacks
LayerX researchers have discovered how to bypass Claude Code’s safety rules using the CLAUDE.md file. This exploit allows…...
CVE-2025-65716: Improper Control of Generation of Code
An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to execute arbitrary code via uploading a crafted .Md file...
Malicious code in omega-cms-lf-ng-md-file-input (npm)
The package omega-cms-lf-ng-md-file-input was found to contain malicious code...
MAL-2025-28210 Malicious code in omega-cms-lf-ng-md-file-input (npm)
The package omega-cms-lf-ng-md-file-input was found to contain malicious code...
CVE-2020-19952
Cross Site Scripting XSS vulnerability in Rendering Engine in jbt Markdown Editor thru commit 2252418c27dffbb35147acd8ed324822b8919477, allows remote attackers to execute arbirary code via crafted payload or opening malicious .md file...
CVE-2023-27164: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary code via a crafted .md file...
CVE-2022-4821
A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...
Cross site scripting
A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...
CVE-2022-4821 FlatPress XML File Handler/MD File admin.uploader.php onupload cross site scripting
A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...
CVE-2022-4821 FlatPress XML File Handler/MD File admin.uploader.php onupload cross site scripting
A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...
CVE-2022-4821
A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...
CVE-2022-4821: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...
MAL-2022-4526 Malicious code in mdfile (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e89c61ad9b8ba91fdb536e3b7ea330c9e56901d1423b6825b68b85ca27d7434 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...