Vulnerability Description
Markdown Explorer 0.1.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious code through file uploads and editor inputs. Attackers can upload markdown files with embedded JavaScript payloads to execute remote commands and potentially gain system access.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/jersou/markdown-explorer
- https://imgur.com/a/w4bcPWs
- https://www.exploit-db.com/exploits/49826
- https://www.vulncheck.com/advisories/markdown-explorer-persistent-cross-site-scr
- https://www.vulncheck.com/advisories/markdown-explorer-persistent-cross-site-scr
FAQ
What is CVE-2021-47836?
CVE-2021-47836 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Markdown Explorer 0.1.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious code through file uploads and editor inputs. Attackers can upload markdown files with em...
How severe is CVE-2021-47836?
CVE-2021-47836 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-47836?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.