Vulnerabilities > Remarkable Project > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-05-13 | CVE-2019-12043 | Cross-site Scripting vulnerability in Remarkable Project Remarkable 1.7.1 In remarkable 1.7.1, lib/parser_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as demonstrated by a \x0ejavascript: URL. | 6.1 |
| 2018-06-04 | CVE-2017-16006 | Cross-site Scripting vulnerability in Remarkable Project Remarkable Remarkable is a markdown parser. | 6.1 |
| 2018-05-31 | CVE-2014-10065 | Cross-site Scripting vulnerability in Remarkable Project Remarkable Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing for javascript: url's to be injected into the rendered content. | 6.1 |