CVE-2020-27176

Mutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution

High · published October 16, 2020

CVSS v3.1
8.3
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

Mutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution. NOTE: this might be considered a duplicate of CVE-2020-26870; however, it can also be considered an issue in the design of the "source code mode" feature, which parses HTML even though HTML support is not one of the primary advertised roles of the product.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.01884 · 79.3th percentile
Published
2020-10-16T04:28Z
EPSS history
Timeline
  • 16 OCT 04:28Z
    Mutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution
    cvelistv5