Lucene search
+L

66 matches found

NVD
NVD
added 2024/07/29 4:15 p.m.50 views

CVE-2024-41819

Note Mark is a web-based Markdown notes app. A stored cross-site scripting XSS vulnerability in Note Mark allows attackers to execute arbitrary web scripts via a crafted payload injected into the URL value of a link in the markdown content. This vulnerability is fixed in 0.13.1...

8.7CVSS0.00824EPSS
SaveExploits4References2
OSV
OSV
added 2024/07/29 4:03 p.m.30 views

CVE-2024-41819 Note Mark has a stored XSS in the note link href attribute

Note Mark is a web-based Markdown notes app. A stored cross-site scripting XSS vulnerability in Note Mark allows attackers to execute arbitrary web scripts via a crafted payload injected into the URL value of a link in the markdown content. This vulnerability is fixed in 0.13.1...

8.7CVSS7AI score
SaveExploits0References4
CVE
CVE
added 2024/07/29 4:03 p.m.85 views

CVE-2024-41819

CVE-2024-41819 concerns Note Mark, a web-based Markdown notes app. The vulnerability is a stored XSS in the URL value of a link embedded in markdown content, allowing arbitrary web scripts to run when a user interacts with the rendered note. Affected versions are prior to 0.13.1; remediation is t...

8.7CVSS7.5AI score0.00824EPSS
SaveExploits4References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/29 4:03 p.m.28 views

CVE-2024-41819 Note Mark has a stored XSS in the note link href attribute

Note Mark is a web-based Markdown notes app. A stored cross-site scripting XSS vulnerability in Note Mark allows attackers to execute arbitrary web scripts via a crafted payload injected into the URL value of a link in the markdown content. This vulnerability is fixed in 0.13.1...

8.7CVSS7.5AI score0.00824EPSS
SaveExploits4References2
CNNVD
CNNVD
added 2024/07/29 12:00 a.m.12 views

Note Mark 安全漏洞

Note Mark is a web-based Markdown note-taking application from the individual developer Leo Spratt. A security vulnerability exists in Note Mark version 0.13.0 and prior versions. An attacker could exploit this vulnerability to execute arbitrary web script by injecting a specially crafted payload...

8.7CVSS8.3AI score0.00824EPSS
SaveExploits4References3
Positive Technologies
Positive Technologies
added 2024/07/29 12:00 a.m.17 views

PT-2024-29585

Name of the Vulnerable Software and Affected Versions Note Mark versions prior to 0.13.1 Description A stored cross-site scripting issue allows attackers to execute arbitrary web scripts via a crafted payload injected into the URL value of a link in the markdown content. Recommendations For...

8.7CVSS7.4AI score0.00824EPSS
SaveExploits4References6
Rows per page
Query Builder