CVE-2019-12184

There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label named flowchart, sequence, gallery, or chart, as demonstrated by a crafted SRC attribute of an IFRAME element, a different vulnerability than CVE-2019-12136...

CVE-2019-12184: Improper Neutralization of Input During Web Page Generation

There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label named flowchart, sequence, gallery, or chart, as demonstrated by a crafted SRC attribute of an IFRAME element, a different vulnerability than CVE-2019-12136...

CVE-2019-12136

There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element...

Cross site scripting

There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element...

CVE-2019-12136

There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element...

CVE-2019-12136

There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element...

CVE-2019-12136

BoostIO Boostnote 0.11.15 is affected by CVE-2019-12136. The vulnerability is an XSS in the UI when processing a label named mermaid, exploitable via a crafted SRC attribute of an IFRAME element. The issue originates from Boostnote’s rendering path for this label, enabling injection of malicious ...

CVE-2019-12136: Improper Neutralization of Input During Web Page Generation

There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element...

Boostnote cross-site scripting vulnerability (CNVD-2019-14706)

Boostnote is an application for writing code snippets. The program supports writing JavaScript, Python, HTML and CSS in several languages and has an autosave feature. A cross-site scripting vulnerability exists in Boostnote version 0.11.15, which stems from the failure of the WEB application to...

Boostnote Cross-Site Scripting Vulnerability

Boostnote is an application for writing code snippets. The program supports writing JavaScript, Python, HTML and CSS in several languages and has an autosave feature. A cross-site scripting vulnerability exists in Boostnote version 0.11.7. A remote attacker can exploit this vulnerability to injec...

Design/Logic Flaw

Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element...

CVE-2018-13433

Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element...

CVE-2018-13433

Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element...

CVE-2018-13433

Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element...

CVE-2018-13433

CVE-2018-13433 affects Boostnote v0.11.7, where XSS is possible during Markdown highlighting, demonstrated via an onerror attribute on an IMG element. The connected sources confirm the vulnerability pattern but do not provide explicit exploit details, affected versions beyond v0.11.7, or remediat...

CVE-2018-13433: Improper Neutralization of Input During Web Page Generation

Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element...