VULNERABILITY INTELLIGENCE

CVE-2025-43954

CVSS score6.1 MEDIUM

EPSS probability0.21%

CISA KEVNot currently listed

Published2025-04-20

Last modified2026-06-17

Description

QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.