CVE-2025-56683
A cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via inj...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README.md file.
参照URL
- advisory github.com
- advisory martinkubecka.sk
- advisory nvd.nist.gov
- package github.com
- patch github.com
- web github.com