CVEs-PoC/2020/CVE-2020-16608.md

### [CVE-2020-16608](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16608)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).

### POC

#### Reference
- https://sghosh2402.medium.com/cve-2020-16608-8cdad9f4d9b4

#### Github
- https://github.com/doyensec/awesome-electronjs-hacking