CVE-2020-26157

Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration...

CVE-2020-26157

Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration...

CVE-2020-26157

CVE-2020-26157 affects Leanote Desktop up to version 2.6.2. The root cause is a mishandled note title during syncing that enables cross-site scripting (XSS). This vulnerability is described as leading to remote code execution due to Node integration. The available documents do not specify a concr...