CVE-2022-40011
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
An XSS vulnerability in Typora through version 1.3.8 allows an attacker to inject malicious JavaScript via a document containing an SVG element with an attacker-controlled onload attribute. When the exported document is opened by a victim, the code executes in the context of their browser.
Risk Assessment
An attacker can hijack the user's session, steal data, or perform other malicious actions within the victim's origin, posing a serious threat to data confidentiality and integrity.
Recommendation
Immediately update Typora to version 1.3.9 or later, which includes a fix for this vulnerability. Until updated, avoid opening documents from untrusted sources.
Original NVD description (English source)
Typora through 1.3.8 allows XSS if a document containing an SVG element with an attacker-controlled onload attribute is exported and then used at a victim's origin.