A persistent cross-site scripting vulnerability in Moeditor 0.2.0 allows attackers to execute arbitrary code on the host system when a malicious markdown file is opened.

The application fails to properly sanitize input within markdown files, enabling an attacker to embed malicious JavaScript payloads. When a victim opens a crafted file, the script executes, which can lead to remote code execution on the underlying system.

The vulnerability presents a severe risk as it allows for unauthorized code execution with the privileges of the user running the application. Successful exploitation could lead to full system compromise, data theft, or the installation of persistent malware. Given the CVSS score of 7.2, this issue is considered high severity and requires immediate attention to prevent potential exploitation.

Immediate Action: As no official patch is currently available, users should immediately cease using Moeditor 0.2.0 to process untrusted markdown files from unknown sources.

Proactive Monitoring: Review system logs for suspicious process spawning or unexpected outbound network connections originating from the Moeditor application.

Compensating Controls: Implement strict file handling policies that prohibit opening markdown files from unverified or external sources until a security update is released.

Public Exploit Available: Yes, a public exploit is available via ExploitDB (EDB-ID: 49830).

Due to the availability of a functional proof-of-concept and the potential for remote code execution, this vulnerability poses a significant risk to organizational endpoints. Users are strongly advised to restrict the use of the affected software and monitor for any vendor-provided security updates. If an alternative editor exists, migration is recommended until the vendor addresses the underlying security flaw.