Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the Mermaid component.

Published Aug 8, 2024 · Updated Mar 20, 2025 · Assigned by mitre