{
    "data_version": "4.0",
    "data_type": "CVE",
    "data_format": "MITRE",
    "CVE_data_meta": {
        "ID": "CVE-2024-7739",
        "ASSIGNER": "cna@vuldb.com",
        "STATE": "PUBLIC"
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "A vulnerability, which was classified as problematic, was found in yzane vscode-markdown-pdf 1.5.0. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."
            },
            {
                "lang": "deu",
                "value": "Es wurde eine problematische Schwachstelle in yzane vscode-markdown-pdf 1.5.0 gefunden. Betroffen hiervon ist ein unbekannter Ablauf. Durch Manipulieren mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff \u00fcber das Netzwerk. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
            }
        ]
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "CWE-79 Cross Site Scripting",
                        "cweId": "CWE-79"
                    }
                ]
            }
        ]
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "yzane",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "vscode-markdown-pdf",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_affected": "=",
                                            "version_value": "1.5.0"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "references": {
        "reference_data": [
            {
                "url": "https://vuldb.com/?id.274359",
                "refsource": "MISC",
                "name": "https://vuldb.com/?id.274359"
            },
            {
                "url": "https://vuldb.com/?ctiid.274359",
                "refsource": "MISC",
                "name": "https://vuldb.com/?ctiid.274359"
            },
            {
                "url": "https://vuldb.com/?submit.385635",
                "refsource": "MISC",
                "name": "https://vuldb.com/?submit.385635"
            },
            {
                "url": "https://github.com/abhi-ingle/Vulnerability-Research/blob/main/POC/Script%20Injection/script_injection_report.md",
                "refsource": "MISC",
                "name": "https://github.com/abhi-ingle/Vulnerability-Research/blob/main/POC/Script%20Injection/script_injection_report.md"
            },
            {
                "url": "https://github.com/abhi-ingle/Vulnerability-Research/blob/main/POC/Script%20Injection/poc_script_inject.mp4",
                "refsource": "MISC",
                "name": "https://github.com/abhi-ingle/Vulnerability-Research/blob/main/POC/Script%20Injection/poc_script_inject.mp4"
            }
        ]
    },
    "credits": [
        {
            "lang": "en",
            "value": "abhi-ingle (VulDB User)"
        }
    ],
    "impact": {
        "cvss": [
            {
                "version": "3.1",
                "baseScore": 4.3,
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                "baseSeverity": "MEDIUM"
            },
            {
                "version": "3.0",
                "baseScore": 4.3,
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                "baseSeverity": "MEDIUM"
            },
            {
                "version": "2.0",
                "baseScore": 5,
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N"
            }
        ]
    }
}