Unknown · Hexoeditor · CVE-2022-24656
**Name of the Vulnerable Software and Affected Versions**
HexoEditor version 1.1.8
**Description**
The issue allows for Cross Site Scripting (XSS) attacks. By inserting a common XSS payload into a markdown file and opening it with the app, the payload will execute several times.
**Recommendations**
For HexoEditor version 1.1.8, at the moment, there is no information about a newer version that contains a fix for this vulnerability.