Description
A cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README.md file.
References
- www.cve.org/CVERecord ↗
- nvd.nist.gov/vuln/detail/CVE-2025-56683 ↗
- github.com/logseq/logseq ↗
- github.com/logseq/logseq/commit/4cdf49aedd8de073015b6945a529399c3bfa109a ↗
- github.com/martinkubecka/Attributed-CVEs/blob/main/unresolved-vulnerabilities/logseq_xss_to_rce.md ↗
- martinkubecka.sk/security-advisories/cve-2025-56683/ ↗
Related CVEs
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.