CVE-2025-56683: XSS
Published Oct 9, 2025
·Updated
A cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README.md file.
Affected Software
1 affected component
Logseq Logseq
Event History
Oct 9, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via OSV·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-56683?
CVE-2025-56683 is classified as a critical severity vulnerability due to its potential for remote code execution via XSS.
2
How do I fix CVE-2025-56683?
To fix CVE-2025-56683, update Logseq to the latest version where the vulnerability has been addressed.
3
What is affected by CVE-2025-56683?
CVE-2025-56683 affects Logseq version 0.10.9 and may allow attackers to inject malicious JavaScript.
4
What type of vulnerability is CVE-2025-56683?
CVE-2025-56683 is a cross-site scripting (XSS) vulnerability that enables arbitrary code execution.
5
Can CVE-2025-56683 be exploited through a README.md file?
Yes, CVE-2025-56683 can be exploited by injecting malicious JavaScript into a crafted README.md file.