Skip to content
OpenAdvisories
Unscored CVE-2020-18221 EUVD-2020-10148GHSA-2qh5-69gm-xwrw

Cross Site Scripting (XSS) in Typora v0.9.65 and earlier allows remote attackers to execute arbitrary code by injecting commands during blo…

Published May 26, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Cross Site Scripting (XSS) in Typora v0.9.65 and earlier allows remote attackers to execute arbitrary code by injecting commands during block rendering of a mathematical formula.

References