CVE-2022-21158

MarkText における XSS (クロスサイトスクリプティング)

MarkText contains a cross-site scripting vulnerability, which causes execution of arbitrary script upon opening the Markdown file from the application.

Disclosure Date

2023/03/03

Credit

Eiji Mori (@ei01241)

CWE

• CWE-79

Product URLs

• https://marktext.app/

Reference

• https://www.cve.org/CVERecord?id=CVE-2022-21158
• https://jvn.jp/jp/JVN89524240/
• https://github.com/marktext/marktext/releases/tag/v0.17.0