Skip to content
OpenAdvisories

Vendor

imzbf

1 known vulnerabilities.

Products

md-editor-v3 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-84992

    md-editor-v3: XSS via fenced-code language rendering bypass

    md-editor-v3 is a Markdown editor for Vue 3 developed in JSX and TypeScript. Prior to 6.5.4, MdPreview's useMarkdownIt() highlight callback in packages/MdEditor/layouts/Content/composition/useMarkdownIt.ts inserts a fenced-code language value into class and l…

    imzbf md-editor-v3 md-editor-v3 npm