CVE-2023-39703

MediumCVSS 6.1

Published: 01/09/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

36th percentile - higher than 36% of all known CVEs

Summary

A cross site scripting (XSS) vulnerability in the Markdown Editor component of Typora v1.6.7 allows attackers to execute arbitrary code via uploading a crafted Markdown file.

Risk Assessment

This vulnerability could lead to remote code execution, posing a significant security risk to systems using this software.

Recommendation

It is recommended to update Typora to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

A cross site scripting (XSS) vulnerability in the Markdown Editor component of Typora v1.6.7 allows attackers to execute arbitrary code via uploading a crafted Markdown file.