CVE-2021-47836CWE-79

Markdown Explorer 0.1.1 - Persistent Cross-Site Scripting

Medium · published January 16, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
27.1
In the wild
Unconfirmed
What it is

Markdown Explorer 0.1.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious code through file uploads and editor inputs. Attackers can upload markdown files with embedded JavaScript payloads that execute in the application's privileged renderer context, allowing code execution on the host.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
EPSS
0.00347 · 27.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-01-16T19:09Z
EPSS history
Timeline
  • 16 JAN 19:09Z
    Markdown Explorer 0.1.1 - Persistent Cross-Site Scripting
    cvelistv5