PT-2026-3294 · Marky · Marky

Taurusomar · Publicado 2026-01-16 · Atualizado 2026-01-16 · CVE-2021-47839

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Marky version 0.0.1

Description Marky version 0.0.1 contains a persistent cross-site scripting issue. Attackers can upload crafted markdown files with embedded JavaScript payloads. When these files are opened, the embedded scripts execute, potentially enabling remote code execution. The issue allows attackers to inject malicious scripts into markdown files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2021-47839

Produtos afetados

Marky

Referências · 7

• 🔥 https://exploit-db.com/exploits/49831 · Exploit
• 🔥 https://imgur.com/a/qclfrUx · Exploit
• 🔥 https://vulncheck.com/advisories/marky-persistent-cross-site-scripting · Exploit
• https://github.com/vesparny/marky · Nota
• https://twitter.com/CVEnew/status/2012303205703761982 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2021-47839 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2021-47839 · Nota de Segurança