critical9.6
CVE-2021-29996
Mark Text through 0.16.3 allows attackers arbitrary command execution.
Impact
Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution (RCE) by opening .md files containing a mutation Cross Site Scripting (XSS) payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Marktext | Marktext | through 0.16.3 |