Markright Persistent Cross-Site Scripting Vulnerability

A persistent cross-site scripting vulnerability has been identified in Markright version 1.0. This vulnerability allows attackers to inject malicious JavaScript into markdown files, which is executed when the file is opened. This could potentially lead to remote code execution on the victim's system.

Impact

Exploitation of this vulnerability allows for persistent cross-site scripting, with the injected payload executed automatically when the markdown file is opened. According to the vulnerability disclosure, this could enable remote code execution on the victim's system.

Reproduction

To reproduce this vulnerability, upload a markdown file containing a JavaScript payload into the Markright application. Once the file is opened, the embedded script will execute, demonstrating the cross-site scripting vulnerability. The Exploit Database entry for this vulnerability includes a proof-of-concept video showing the exploitation process.