Description
Typora through 1.3.8 allows XSS if a document containing an SVG element with an attacker-controlled onload attribute is exported and then used at a victim's origin.
Medium · 6.1
CVE-2022-40011
EUVD-2022-43336GHSA-q28p-82xj-hwh7
Typora through 1.3.8 allows XSS if a document containing an SVG element with an attacker-controlled onload attribute is exported and then u…
Published Dec 23, 2022 · Updated Jul 9, 2026 · Assigned by mitre