Marktext

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution (RCE) by opening .md files containing a mutation Cross Site Scripti…CVE-2021-29996Marktext · 2.8% likely

   CWE-79

2. Mark Text v0.16.3 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability which allows attackers to perform remote code execution (RCE) via injecting a craf…CVE-2022-25069Marktext · 2.0% likely

   CWE-79

3. MarkText through 0.16.3 does not sanitize the input of a mermaid block before rendering. This could lead to Remote Code Execution via a .md file containing a mutation Cross-Site S…CVE-2022-24123Marktext · 1.9% likely

   CWE-79

4. Mutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution. NOTE: this might be considered a duplicate of CVE-2020-26870; however, it can also be consider…CVE-2020-27176Marktext · CVSS 8.3 · 1.9% likely

   CWE-79

5. MarkText DOM-Based Cross-site Scripting leading to Remote Code ExecutionCVE-2023-2318MarkText · CVSS 8.6 · 0.5% likely

   CWE-79

6. A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper handling of the link (with javascript: scheme) inside the document may allow an a…CVE-2022-21158MarkText · 0.5% likely

   CWE-79

7. MarkText WSH JScript code injectionCVE-2023-1004Marktext · CVSS 5.3 · 0.4% likely

   CWE-94

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.