Cross Site Scripting (XSS) vulnerability in Typora v.1.6.7 and before, allows a local attacker to obtain sensitive information via a crafted script during markdown file creation.
https://github.com/0x0fc/TyporaXSS/blob/main/TyporaXSS.md
Source: Mitre, NVD
Published: 2024-04-16
Updated: 2024-04-16
Base Score: 1.9
Vector: CVSS2#AV:L/AC:M/Au:N/C:N/I:P/A:N
Severity: Low
Base Score: 4.6
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Severity: Medium