Description
Markright 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to embed malicious payloads in markdown files. Attackers can upload specially crafted markdown files that execute arbitrary JavaScript when opened, potentially enabling remote code execution on the victim's system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| dvcrn | Markright | 1.0 | — |
References
- ExploitDB-49834 exploit
- Markright GitHub Repository product
- Proof of Concept Video exploit
- VulnCheck Advisory: Markright 1.0 - Persistent Cross-Site Scripting third-party-advisory