Skip to content
Threat Feed

Tag

Md-Fileserver

1 brief RSS
high advisory

md-fileserver Stored/Reflected XSS Vulnerability

A cross-site scripting (XSS) vulnerability exists in md-fileserver's Markdown rendering logic, where user-supplied Markdown content containing raw HTML, including <script> tags, is processed and injected into the resulting page without sanitization, leading to arbitrary JavaScript execution and potential account takeover.

md-fileserver xss reflected-xss stored-xss javascript
2r 1i