Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-41819

Note Mark has a stored XSS in the note link href attribute

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Note Mark is a web-based Markdown notes app. A stored cross-site scripting (XSS) vulnerability in Note Mark allows attackers to execute arbitrary web scripts via a crafted payload injected into the URL value of a link in the markdown content. This vulnerability is fixed in 0.13.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

enchant97 note-mark

  • <= 0.13.0affected

References