Skip to content
4.7 Medium

CVE-2025-9541 The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with…

Description

The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Affected products and versions

Product Affected versions Fixed in
Markup Markdown 3.20 earliest → < 3.20.10 3.20.10
The 2 CVEs of Markup Markdown →
Track this CVE