Hackmdio: Security Vulnerabilities
CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can be bypassed by uploading a .html file that references an uploaded .js file.
CVSS Score
4.9
EPSS Score
0.0
Published
2025-04-26