THREAT OPS › Threat News › [NVD] CVE-2021-47839 (HIGH 7.2) — Marky 0.0.1 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into markdown files. Attackers can upload crafted markdown files with embedded JavaScript payloads that execute when the file is opened, potentially enabling rem
[NVD] CVE-2021-47839 (HIGH 7.2) — Marky 0.0.1 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into markdown files. Attackers can upload crafted markdown files with embedded JavaScript payloads that execute when the file is opened, potentially enabling rem
CVE-2021-47839 CVSS: 7.2 HIGH Published: 2026-01-16T19:16:09.537
Marky 0.0.1 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into markdown files. Attackers can upload crafted markdown files with embedded JavaScript payloads that execute when the file is opened, potentially enabling remote code execution.
MITRE ATT&CK techniques
- JavaScriptT1059.007
Indicators of compromise
- CVE-2021-47839cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2021-47839