CVE-2021-47840
HIGHMoeditor 0.2.0 - Stored Cross-Site Scripting via Markdown File Upload
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-47840. PoCs published by TaurusOmar.
AI-analyzed exploit summary This exploit demonstrates a persistent XSS vulnerability in Moeditor 0.2.0, allowing an attacker to execute arbitrary JavaScript code when a malicious .md file is opened. The payload includes a reverse shell attempt via netcat, though execution depends on the victim's environment.
Description
Moeditor 0.2.0 contains a persistent cross-site scripting vulnerability that allows attackers to store malicious payloads within markdown files. Attackers can upload specially crafted markdown files with embedded JavaScript that execute when opened, potentially enabling remote code execution on the victim's system.
Exploits (1)
This exploit demonstrates a persistent XSS vulnerability in Moeditor 0.2.0, allowing an attacker to execute arbitrary JavaScript code when a malicious .md file is opened. The payload includes a reverse shell attempt via netcat, though execution depends on the victim's environment.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N