CyberRota Analysis
AI-GeneratedMilkdown versions prior to 7.21.3 are vulnerable to a stored cross-site scripting (XSS) flaw in the @milkdown/preset-commonmark and @milkdown/components packages, enabling attackers with document write access to inject and execute arbitrary JavaScript in the browsers of users who interact with the affected documents. The vulnerability arises from improper URL scheme validation and ineffective sanitization of raw URL values, allowing malicious payloads to bypass security measures. Organizations using Milkdown for document editing and sharing should prioritize patching to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Milkdown before 7.21.3 contains a stored cross-site scripting vulnerability in the @milkdown/preset-commonmark and @milkdown/components packages that allows attackers with document write access to execute arbitrary JavaScript in the browser context of any user who opens the document or clicks a rendered link. The parseMarkdown runner stores raw URL values from the remark AST as href mark attributes without URL scheme validation, and the ineffective DOMPurify.sanitize call in edit-view.ts treats the bare URL string as a text node and returns it unchanged, allowing javascript: payloads to pass through the link-tooltip preview component and read-only mode anchor elements unmodified.