volca/markdown-preview

volca/markdown-preview

GitHubGitHub
GitHubgithub.com
chrome.google.comchrome.google.com
Releases48
Frequency3 months 1 week
Last Release
Stars250
Markdown Preview Plus -- Enables Chrome to render markdown files as HTML
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2017-11593↗
—4.3 MEDIUM

Cross-site scripting (XSS) vulnerability in the Markdown Preview Plus extension before 0.5.7 for Chrome allows remote attackers to inject arbitrary web script or HTML into some web applications via the upload and display of crafted text, markdown, or rst files that are designed to be viewed in the browser as plain text, but that will be converted to HTML without proper sanitization.