Product · @quasar

QMarkdown

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.9

CVE-2025-43954

QMarkdown Cross-Site Scripting (XSS) vulnerability

QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.

@quasar QMarkdown @quasar/quasar-ui-qmarkdown npm

Apr 20, 2025