CVE-2022-21158

A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper handling of the link (with javascript: scheme) inside the…

published March 7, 2022

CVSS
—
EPSS
1%
Percentile
44.3
In the wild
Unconfirmed
What it is

A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper handling of the link (with javascript: scheme) inside the document may allow an attacker to execute an arbitrary script on the PC of the user using marktext.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00535 · 44.3th percentile
Published
2022-03-07T09:00Z
EPSS history
Timeline
  • 07 MAR 09:00Z
    A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper handling of the link (with javascript: scheme) inside the…
    cvelistv5