CVE-2024-41481: Cross-site scripting (XSS) vulnerability in Typora Markdown editor before version 1.9.3 via the Mermaid component. This flaw allows attackers to inject arbitrary web scripts into the browsers of users, potentially leading to session hijacking, malware distribution, or defacement. The vulnerability resides within how Typora handles the Mermaid component for rendering diagrams. Although the CVSS score is 6.1, the SOCRadar Vulnerability Risk Score (SVRS) is 58, indicating a moderate risk that should be addressed in a timely manner to prevent potential exploitation. Because the vulnerability is tagged "In The Wild", it suggests active exploitation attempts or proof-of-concept code is publicly available, increasing the urgency for patching. Users of Typora are advised to upgrade to version 1.9.3 or later to mitigate this XSS vulnerability. Failing to do so could result in compromised user data and system integrity.