Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Release: Markup Markdown 3.20.10 Clear all filters
TI-2025-08740 CVE-2025-9541 · GHSA-2p32-565h-8qfx

Markup Markdown < 3.20.10 - Contributor+ Stored XSS

Priority MEDIUM 55

The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.0023 Published 2025-09-22 Fixed in 3.20.10
TI-2025-08739 CVE-2025-9540 · GHSA-grj3-2jxj-j529

Markup Markdown < 3.20.10 - Contributor+ Stored XSS

Priority MEDIUM 55

The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.0023 Published 2025-09-22 Fixed in 3.20.10