Vulnerability library
Security checkMay 07, 2026

@diplodoc/search-extension allows stored XSS via Markdown file title

Understand the exposure, see the recommended fix, and check whether your own website has related weaknesses.

Medium severitynpm@diplodoc/search-extension

Check your website

Find this and other vulnerabilities with a free scan.

Your scan runs on your computer. No account required.

Description

@diplodoc/search-extension 1.0.0 through 3.0.2 allows stored XSS via .md file title.

Recommendation

Update the @diplodoc/search-extension package to the latest compatible version. Followings are version details:

  • Affected version(s): >= 1.0.0, < 3.0.5
  • Patched version(s): 3.0.5

References

Could your website be exposed too?

SmartScanner can check your website for @diplodoc/search-extension allows stored XSS via Markdown file title and gives you actionable findings to investigate.

Start a free scan

Related Issues

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

CSRF, XXE, and 12 Other Security Acronyms Explained

How do hackers hack websites?

See something that needs correcting? Let us knowUpdated May 07, 2026