CVE-2026-44708— Mistune Math Plugin XSS Escape Bypass
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-44708
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Mistune Math Plugin XSS Escape Bypass
Source: NVD (National Vulnerability Database)
Vulnerability Description
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the mistune math plugin renders inline math ($...$) and block math ($$...$$) by concatenating the raw user-supplied content directly into the HTML output without any HTML escaping. This occurs even when the parser is explicitly created with escape=True, which is supposed to guarantee that all user-controlled text is sanitised before reaching the DOM. This vulnerability is fixed in 3.2.1.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-44708
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-44708
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-44708 (1)
Vendor Pages for CVE-2026-44708 (1)
Same Patch Batch · lepture · 2026-05-26 · 5 CVEs total
| CVE-2026-44898 | 6.1 MEDIUM | Mistune TOC Anchor Injection XSS |
| CVE-2026-44897 | 6.1 MEDIUM | Mistune Heading ID Attribute Injection XSS |
| CVE-2026-44899 | 4.7 MEDIUM | Mistune Image Directive CSS Injection Vulnerability |
| CVE-2026-44896 | Mistune: XSS via unescaped figclass/figwidth in Figure directive |
IV. Related Vulnerabilities
Same product: mistune
- CVE-2026-44898
Mistune TOC Anchor Injection XSS - CVE-2026-44897
Mistune Heading ID Attribute Injection XSS - CVE-2026-44899
Mistune Image Directive CSS Injection Vulnerability - CVE-2026-44896
Mistune: XSS via unescaped figclass/figwidth in Figure direc - CVE-2026-33079
Mistune ReDoS in LINK_TITLE_RE allows denial of service with
Same vendor: lepture
- CVE-2026-44898
Mistune TOC Anchor Injection XSS - CVE-2026-44897
Mistune Heading ID Attribute Injection XSS - CVE-2026-44899
Mistune Image Directive CSS Injection Vulnerability - CVE-2026-44896
Mistune: XSS via unescaped figclass/figwidth in Figure direc - CVE-2026-33079
Mistune ReDoS in LINK_TITLE_RE allows denial of service with
Same weakness: CWE-79
- CVE-2026-42750
WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scriptin - CVE-2026-42754
WordPress Favicon plugin <= 1.3.46 - Cross Site Scripting (X - CVE-2026-42751
WordPress Booking Manager plugin <= 2.1.18 - Cross Site Scri - CVE-2026-42759
WordPress Affiliate Super Assistent plugin <= 1.10.1 - Cross - CVE-2026-42762
WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.
V. Comments for CVE-2026-44708
No comments yet