Skip to content
OpenAdvisories

Vendor

MarkText

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.6

    MarkText DOM-Based Cross-site Scripting leading to Remote Code Execution

    DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in the context of MarkText main window. This vulnerability can be exploited if a user copies text from a …