Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-Site Scripting (XSS) vulnerability found in MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 (May 2025) allows a remote attacker to execute arbitrary code via a crafted script input to the editor interface. The application does not properly sanitize user-supplied Markdown before rendering it. Successful exploitation could lead to session hijacking, credential theft, or arbitrary client-side code execution in the context of the victim's browser.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MarkTwo 安全漏洞
Vulnerability Description
MarkTwo是Anthony Garvan个人开发者的一个markdown编辑器。 MarkTwo e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298版本存在安全漏洞，该漏洞源于编辑器接口未清理用户输入的Markdown，可能导致跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A