Typora 1.0.0-1.7.0 - Stored Cross-Site Scripting via Markdown File Upload
Typora v1.0.0 through v1.7 version (below) Markdown editor has a cross-site scripting (XSS) vulnerability, which allows attackers to execute arbitrary code by uploading Markdown files.