Skip to content
OpenAdvisories

Package · Packagist

mckenziearts/livewire-markdown-editor

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.1
    GHSA-gxxh-8vcj-w2mh

    livewire-markdown-editor has arbitrary file upload that allows stored XSS via attachment handler

    ### Impact All versions of `mckenziearts/livewire-markdown-editor` prior to **v1.3** contain a critical arbitrary file upload vulnerability in the `MarkdownEditor::updatedAttachments()` Livewire handler. The handler calls `$file->store()` with no server-side …

    mckenziearts/livewire-markdown-editor Packagist