Mistune, a Python Markdown parser, had an XSS vulnerability (CWE-79) in versions before 3.2.1. The render_toc_ul() function builds a <ul> table-of-contents from tuples containing heading level, id, and text. The id and text values are inserted into <a> tags using plain Python string formatting without HTML escaping. When heading IDs are generated from user input, an attacker can craft headings that break out of the href attribute context and inject arbitrary HTML or script code into the rendered TOC. This vulnerability allows injection of malicious scripts in the generated HTML. The issue is resolved in version 3.2.1.

Exploitation of this vulnerability can lead to injection of arbitrary HTML and script code in the rendered table-of-contents, potentially enabling cross-site scripting attacks. The CVSS score of 6.1 indicates a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, and partial impact on confidentiality and integrity but no impact on availability. There are no known exploits in the wild at this time.

This vulnerability is fixed in mistune version 3.2.1. Users should upgrade to version 3.2.1 or later to remediate this issue. No other official remediation level or temporary fix is indicated. Patch status is confirmed by the vendor's versioning and description. Until upgrading, avoid processing untrusted user input as heading text that generates IDs in the table-of-contents.