CVE-2021-47836

5.1 mediumEPSS 0.3%

Medium (5.1). EPSS 0.3% chance of exploitation in the next 30 days.

Markdown Explorer 0.1.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious code through file uploads and editor inputs. Attackers can upload markdown files with embedded JavaScript payloads that execute in the application's privileged renderer context, allowing code execution on the host.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2026-01-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/jersou/markdown-explorer
https://imgur.com/a/w4bcPWs
https://www.exploit-db.com/exploits/49826
https://www.vulncheck.com/advisories/markdown-explorer-persistent-cross-site-scripting
https://www.vulncheck.com/advisories/markdown-explorer-persistent-cross-site-scripting

Check your stack JSON