Skip to content
OpenAdvisories

Product · hackmdio

codimd

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2024-38354

    Cross-site Scripting in Hackmd.io Notes lead by HTML Injection

    CodiMD allows realtime collaborative markdown notes on all platforms. The notebook feature of Hackmd.io permits the rendering of iframe `HTML` tags with an improperly sanitized `name` attribute. This vulnerability enables attackers to perform cross-site scrip…

    hackmdio codimd