AI Score
Confidence
Low
EPSS
Percentile
44.7%
Turtlapp Turtle Note v0.7.2.6 does not filter the <meta> tag during markdown parsing, allowing attackers to execute HTML injection.
github.com/turtl/tracker/issues/404
www.cybercitadel.com/html-injection-turtl/