CVE-2026-15505

creationtimestamp| type| source ---|---|--- 2026-07-12 20:28:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhzcc6z252e 2026-07-12 23:56:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqiex6yemk2x 2026-07-13 00:15:03+00:00| seen|...

CVE-2026-15505

The CVE concerns vnotex vnote (up to version 3.20.1) where the YAML Frontmatter component exposes cross-site scripting via the file /src/data/extra/web/js/markdownit.js. The issue arises from manipulation of the argument p_metaData in the YAML Frontmatter code, which can potentially be exploited ...