CVE-2026-84992 | imzbf md-editor-v3 up to 6.5.3 Highlight Callback useMarkdownIt.ts useMarkdownIt cross site scripting

September 18, 2026 Yanac

A vulnerability identified as problematic has been detected in imzbf md-editor-v3 up to 6.5.3. This issue affects the function useMarkdownIt of the file packages/MdEditor/layouts/Content/composition/useMarkdownIt.ts of the component Highlight Callback. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-84992. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More