Moeditor Persistent Cross-Site Scripting Vulnerability

A persistent cross-site scripting vulnerability has been identified in Moeditor version 0.2.0. This vulnerability allows attackers to inject malicious JavaScript into markdown files, which is executed when the file is opened. This could potentially lead to remote code execution on the victim's system.

Impact

Exploitation of this vulnerability allows for persistent cross-site scripting, with the injected payload executed when the markdown file is opened. According to the exploit author, this could lead to remote code execution on the victim's system.

Reproduction

To reproduce this vulnerability, upload a markdown file containing a JavaScript payload into Moeditor 0.2.0. Once the file is opened in the editor, the embedded script will execute, demonstrating the cross-site scripting vulnerability.