CyberRota Analysis
AI-GeneratedThe vulnerability affects the Markdown.toHtml function in the Page Content Rendering component of michaelliao itranswarp versions up to 2.19, allowing for cross-site scripting (XSS) attacks that can be executed remotely. Although the severity is rated low, organizations using unsupported versions of this Java product should prioritize remediation to mitigate potential exploitation. Users should consider updating to a supported version or implementing security measures to protect against XSS vulnerabilities.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in michaelliao itranswarp up to 2.19. The impacted element is the function Markdown.toHtml of the file Markdown.java of the component Page Content Rendering. This manipulation causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet. This vulnerability only affects products that are no longer supported by the maintainer.