typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left outline bar.

Published Jan 25, 2019 · Updated Aug 4, 2024 · Assigned by mitre