CVE-2025-43954

MEDIUM CVSS: 4.9 Published: 2025-04-20 Modified: 2026-06-17

Description

QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.

Affected Platforms

Quasar Qmarkdown

Weakness Type

CWE-79, CWE-79

References