CVE-2021-47836 MEDIUM

CVE-2021-47836: Markdown Explorer 0.1.1 - Persistent Cross-Site Scripting

Vendor Jersou
Product Markdown Explorer
Weakness CWE-79 · XSS
Published January 16, 2026
Last update May 25, 2026

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

What the vulnerability does

01Description

Markdown Explorer 0.1.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious code through file uploads and editor inputs. Attackers can upload markdown files with embedded JavaScript payloads that execute in the application's privileged renderer context, allowing code execution on the host.

Key dates

02Disclosure timeline

January 16, 2026 CVE published
May 25, 2026 Record updated