CVE-2026-73042

creationtimestamp| type| source ---|---|--- 2026-08-15 22:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt5qj5lqux2e 2026-08-15 23:01:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5rptslbh2r 2026-08-16 01:51:00+00:00| seen|...

CVE-2026-73042 SiYuan before v3.7.4 Remote Code Execution via Menu Metadata

SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allowing stored values to execute script when users open group, view, or field-edit menus. Attackers can inject markup through field descriptions or names that close containing elements and execute arbitra...