Zettlr

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Zettlr records in CISA KEV

No Zettlr vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zettlr 3 records LOW

Records

3 records in Zettlr · all components

TI-2021-08459 CVE-2021-26835 · GHSA-m4hh-q8q7-hhmv

No filtering of cross-site scripting (XSS) payloads in the markdown-editor in Zettlr…

LOW 30

No filtering of cross-site scripting (XSS) payloads in the markdown-editor in Zettlr 1.8.7 allows attackers to perform remote code execution via a crafted file.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01291 Published 2021-06-18 No fix listed CWE-79

TI-2021-03953 CVE-2021-20727 · GHSA-vwf2-95mj-6g95

Cross-site scripting in Hendrik Erz Zettlr

LOW 29

Cross-site scripting vulnerability in Zettlr from 0.20.0 to 1.8.8 allows an attacker to execute an arbitrary script by loading a file or code snippet containing an invalid iframe into Zettlr.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01036 Published 2021-05-27 No fix listed CWE-79

TI-2022-19117 CVE-2022-40276 · GHSA-gq8w-3h98-m48x

Improper input validation in Zettlr

LOW 25

Zettlr version 2.3.0 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Zettlr.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00391 Published 2022-11-03 No fix listed CWE-20

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0