← Database

CVE-2022-25069

CRITICAL CVSS: 9.6 Published: 2022-03-05 Modified: 2026-06-17

Description

Mark Text v0.16.3 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability which allows attackers to perform remote code execution (RCE) via injecting a crafted payload into /lib/contentState/pasteCtrl.js.

Affected Platforms

Marktext Marktext

Weakness Type

CWE-79

References