CVE-2022-42967 — XSS in Caret markdown editor leads to remote code execution when viewing crafted Markdown files
Caret is vulnerable to an XSS attack when the user opens a crafted Markdown file when preview mode is enabled. This directly leads to client-side code execution.
Published: 2023-01-11 · CVSS: 7.5 · CVSS 3.1
Caret is vulnerable to an XSS attack when the user opens a crafted Markdown file when preview mode is enabled. This directly leads to client-side code execution.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7