← Database

CVE-2022-40011

MEDIUM CVSS: 6.1 Published: 2022-12-23 Modified: 2026-07-09

Description

Typora through 1.3.8 allows XSS if a document containing an SVG element with an attacker-controlled onload attribute is exported and then used at a victim's origin.

Affected Platforms

Typora Typora

Weakness Type

CWE-79, CWE-79

References