CVE-2024-33300: Typora

High severity, CVSS 7.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Typora v1.0.0 through v1.7 version (below) Markdown editor has a cross-site scripting (XSS) vulnerability, which allows attackers to execute arbitrary code by uploading Markdown files.

Affected products

• Typora Typora: from 1.0.0, up to and including 1.7.0

Published 2024-05-01. Last modified 2026-06-17.