A persistent cross-site scripting vulnerability in StudyMD 0.3.2 allows an attacker to execute arbitrary code on the host system through malicious markdown files.

The application fails to properly neutralize input when processing markdown files, allowing for the injection of persistent JavaScript payloads. This flaw can be triggered when a user opens a malicious file, enabling an attacker to execute arbitrary code with the privileges of the application.

Successful exploitation of this vulnerability poses a severe risk to confidentiality, integrity, and availability. Because the vulnerability facilitates remote code execution, an attacker could potentially gain full control over the host machine, exfiltrate sensitive data, or deploy further malware. While the CVSS score is 7.2, the potential for remote code execution elevates the urgency of this advisory.

Immediate Action: There is no official patch currently available for this vulnerability. Users should immediately cease using the affected version of StudyMD until a secure update is released by the vendor.

Proactive Monitoring: Security teams should monitor system logs for suspicious process spawning, particularly those involving unexpected shell commands or network connections originating from the StudyMD process.

Compensating Controls: Implement strict file validation policies to prevent the upload or opening of untrusted markdown files. Additionally, ensure the application is running with the least privilege necessary to limit the impact of potential code execution.

Public Exploit Available: Yes, a functional proof-of-concept and technical write-up are available via ExploitDB (EDB-ID 49832).

Given the capability for remote code execution and the availability of public exploit material, this vulnerability presents a high risk to organizational security. Administrators must prioritize isolating any systems running StudyMD 0.3.2 and restrict user access to file import features until a vendor-supplied security patch is verified and applied.