high7.3
CVE-2024-33300
Typora v1.0.0 through v1.7 version (below) Markdown editor has a cross-site scripting (XSS) vulnerability, which allows attackers to execute arbitrary code by …
Impact
Typora v1.0.0 through v1.7 version (below) Markdown editor has a cross-site scripting (XSS) vulnerability, which allows attackers to execute arbitrary code by uploading Markdown files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Typora | Typora | from 1.0.0 through 1.7.0 |