Skip to content
Sign in
4.7 Medium

CVE-2025-9540 The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with…

Description

The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Affected products and versions

Product Affected versions Fixed in
Markup Markdown 3.20 earliest → < 3.20.10 3.20.10

Other CVEs of Markup Markdown

The 2 CVEs of Markup Markdown →
CVE-2025-9541 The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with… 4.7 Medium
Track this CVE