CVE-2024-7739mediumCWE-79

CVE-2024-7739: medium-severity vulnerability in yzane vscode-markdown-pdf

yzane vscode-markdown-pdf cross site scripting

Published

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.4%
exploitation probability
0.4%top 63% of all CVEs
observed exploitation
nono source reports it
A vulnerability, which was classified as problematic, was found in yzane vscode-markdown-pdf 1.5.0. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
yzane · vscode-markdown-pdf
Related CVEs — yzane vscode-markdown-pdf

In the same product, most dangerous first.

CVE-2024-7738MEDIUMyzane vscode-markdown-pdf Markdown File pathname traversalEPSS 0.3%
References
https://github.com/abhi-ingle/Vulnerability-Research/blob/main/POC/Script%20Injection/poc_script_inject.mp4https://github.com/abhi-ingle/Vulnerability-Research/blob/main/POC/Script%20Injection/script_injection_report.mdhttps://vuldb.com/?ctiid.274359https://vuldb.com/?id.274359https://vuldb.com/?submit.385635