SiYuan cross-site scripting vulnerabilities

SiYuan is a privacy-oriented personal knowledge management system developed by SiYuan. Versions of SiYuan 3.6.0 and earlier had a cross-site scripting vulnerability. This vulnerability stemmed from the renderREADME function not properly cleaning HTML within Markdown tags, which could lead to...