CVE-2020-26158

Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration...

CVE-2020-26158

Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration...

CVE-2020-26158

Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration...

PT-2020-16315

Name of the Vulnerable Software and Affected Versions Leanote Desktop versions prior to 2.6.3 Description The issue arises from the mishandling of a note's title when the batch feature is triggered, leading to XSS. This, in turn, results in remote code execution due to Node integration...

CVE-2020-26158: Improper Neutralization of Input During Web Page Generation

Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration...