Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2025-9540

Markup Markdown < 3.20.10 - Contributor+ Stored XSS

Description

The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Markup Markdown

Default version status: unaffected

  • 0 to < 3.20.10affected

References