@diplodoc/search-extension versions 1.0.0 through 3.0.2 are vulnerable to stored cross-site scripting (XSS) via the title of Markdown (.md) files. This vulnerability allows an attacker with the ability to control the .md file title to inject malicious scripts that are stored and executed in the context of users viewing the extension's search results.