Duplicate Advisory: MathLive's Lack of Escaping of HTML allows for XSS

GHSA-929m-phjg-qwcc

Published Apr 1, 2025 · Modified Apr 2, 2025

Description

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-qwj6-q94f-8425. This link is maintained to preserve external references.

Original Description

Cross Site Scripting vulnerability in arnog MathLive Versions v0.103.0 and before (fixed in 0.104.0) allows an attacker to execute arbitrary code via the MathLive function.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-29049
WEB https://github.com/arnog/mathlive/commit/abc26056fd5e29a99edfa96a0bbe855ea2a8b678
ADVISORY https://github.com/advisories/GHSA-qwj6-q94f-8425

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes