CVE-2025-60312

Publication date

2025-10-07 00:00:00

Family

mitre

State

PUBLISHED

Description

Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting (XSS) in the "Markdown Input" field, allowing a remote attacker to inject arbitrary HTML/JavaScript code that executes in the victims browser upon clicking the "Convert to HTML" button.