Yesterday, 12:30 PM
Medium
resolved
resolved
Action Text to_markdown: / content escapes its delimiter, letting a stored body inject arbitrary Markdown
content escapes its delimiter, letting a stored body inject arbitrary Markdown
Bug reported by seoafoz was disclosed at September 12, 2026, 7:08 pm | Cross-site Scripting (XSS) - Stored