{"id":"EUVD-2026-41948","enisaUuid":"fd242336-c4c0-332b-88bc-d4dbade51efb","description":"showdown contains a cross-site scripting vulnerability in metadata title handling that allows attackers to inject arbitrary HTML and JavaScript. When completeHTMLDocument option is enabled, unescaped less-than and greater-than characters in markdown frontmatter metadata are inserted directly into HTML title tags, enabling attackers to break out of the title context and execute malicious scripts in the rendered page.","datePublished":"Jul 6, 2026, 9:00:38 PM","dateUpdated":"Jul 7, 2026, 2:06:55 PM","baseScore":5.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","references":"https://github.com/showdownjs/showdown/issues/1047\nhttps://github.com/showdownjs/showdown\nhttps://www.vulncheck.com/advisories/showdown-cross-site-scripting-via-unescaped-metadata-title-in-completehtmldocument\n","aliases":"CVE-2026-59711\nGHSA-cr32-g25g-vxjj\n","assigner":"VulnCheck","epss":0.23,"enisaIdProduct":[{"id":"d90156ac-69c1-3a6c-9b7b-60d35298e82d","product":{"name":"Showdown","vendor":{"name":"Showdownjs"}},"product_version":"0 ≤2.1.0"}],"enisaIdVendor":[{"id":"3394213e-19b7-3b8d-9d96-f83f1f365014","vendor":{"name":"showdown"}}],"enisaIdVulnerability":[{"id":"5346fa62-53dd-3840-9869-b24d05861211","vulnerability":{"id":"CVE-2026-59711","description":"showdown contains a cross-site scripting vulnerability in metadata title handling that allows attackers to inject arbitrary HTML and JavaScript. When completeHTMLDocument option is enabled, unescaped less-than and greater-than characters in markdown frontmatter metadata are inserted directly into HTML title tags, enabling attackers to break out of the title context and execute malicious scripts in the rendered page.","datePublished":"Jul 6, 2026, 9:00:38 PM","dateUpdated":"Jul 7, 2026, 2:06:55 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","references":"https://github.com/showdownjs/showdown/issues/1047\nhttps://github.com/showdownjs/showdown\nhttps://www.vulncheck.com/advisories/showdown-cross-site-scripting-via-unescaped-metadata-title-in-completehtmldocument\n","enisa_id":"EUVD-2026-41948\n","assigner":"VulnCheck","epss":0.23,"dataProcessed":"Nov 1, 2026, 7:18:17 AM","vulnerabilityProduct":[{"id":"fee46510-2f9c-3b3e-b0ef-6c820ea425ac","product":{"name":"Showdown","vendor":{"name":"Showdownjs"}},"product_version":"0 ≤2.1.0"}],"vulnerabilityVendor":[{"id":"f80b328a-bc3a-3e14-99a6-6727d6b7a328","vendor":{"name":"showdown"}}]}},{"id":"8aca7ef4-c2ae-3089-bd90-37c0c9ccc120","vulnerability":{"id":"GHSA-cr32-g25g-vxjj","description":"showdown metadata title handling allows cross-site scripting","datePublished":"Jul 6, 2026, 9:30:43 PM","dateUpdated":"Aug 7, 2026, 9:05:38 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-59711\nhttps://github.com/showdownjs/showdown/issues/1047\nhttps://github.com/showdownjs/showdown/commit/184a3e4e97f90e075c4512f2c4c06dcf655e91b7\nhttps://github.com/showdownjs/showdown\nhttps://www.vulncheck.com/advisories/showdown-cross-site-scripting-via-unescaped-metadata-title-in-completehtmldocument\n","enisa_id":"EUVD-2026-41948\n","aliases":"CVE-2026-59711\nGHSA-cr32-g25g-vxjj\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:02:28 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}