CVE-2021-26834

2021-06-1812:15:08

Google

osv.dev

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.0%

JSON

A cross-site scripting (XSS) vulnerability exists in Znote 0.5.2. An attacker can insert payloads, and the code execution will happen immediately on markdown view mode.

CPENameOperatorVersion
znote-appeq0.3.7
znote-appeq0.2.5
znote-appeq0.3.9
znote-appeq0.6.0
znote-appeq1.2.0
znote-appeq1.3.1
znote-appeq1.4.0
znote-appeq0.3.4
znote-appeq0.4.1
znote-appeq0.5.2

Name	Operator	Version
znote-app	eq	0.3.7
znote-app	eq	0.2.5
znote-app	eq	0.3.9
znote-app	eq	0.6.0
znote-app	eq	1.2.0
znote-app	eq	1.3.1
znote-app	eq	1.4.0
znote-app	eq	0.3.4
znote-app	eq	0.4.1
znote-app	eq	0.5.2