showdown

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

showdown records in CISA KEV

No showdown vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-42584 CVE-2026-59711 · GHSA-cr32-g25g-vxjj

showdown - Cross-Site Scripting via Unescaped Metadata Title in completeHTMLDocument

MEDIUM 57

showdown contains a cross-site scripting vulnerability in metadata title handling that allows attackers to inject arbitrary HTML and JavaScript.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0023 Published 2026-07-06 Fix deferred CWE-79

TI-2026-42583 CVE-2026-59710 · GHSA-22g5-r2x5-97cx

showdown - Stored XSS via Unescaped Table Header ID Attribute Injection

MEDIUM 57

showdown contains a stored cross-site scripting vulnerability in the parseHeaders function of src/subParsers/makehtml/tables.js that fails to properly escape table header ID attributes.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00338 Published 2026-07-06 Fix deferred CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0