Marky 0.0.1 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into markdown files. Attackers can upload…

Marky 0.0.1 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into markdown files. Attackers can upload crafted markdown files with embedded JavaScript payloads that execute when the file is opened. This vulnerability potentially enables remote code execution, making it a high-severity security issue. The vulnerability affects the markdown processing functionality of the Marky application. Multiple references and proof-of-concept exploits are available demonstrating the vulnerability.