Vulnerability Description
A cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README.md file.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/logseq/logseq
- https://github.com/logseq/logseq/commit/4cdf49aedd8de073015b6945a529399c3bfa109a
- https://github.com/martinkubecka/Attributed-CVEs/blob/main/unresolved-vulnerabil
- https://martinkubecka.sk/security-advisories/cve-2025-56683/
- https://martinkubecka.sk/security-advisories/cve-2025-56683/
FAQ
What is CVE-2025-56683?
CVE-2025-56683 is a vulnerability with a CVSS score of 9.6 (CRITICAL). A cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README....
How severe is CVE-2025-56683?
CVE-2025-56683 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2025-56683?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.