CVE-2023-2318
Published
CVSS v3
8.6
HIGH
CVSS v2
N/A
Affected
1
PROJECT
Description
DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in the context of MarkText main window. This vulnerability can be exploited if a user copies text from a malicious webpage and paste it into MarkText.
📝A simple and elegant markdown editor, available for Linux, macOS and Windows.
GitHub