CVE-2020-26158

Leanote Desktop (up to and including 2.6.2) exposes a vulnerability where triggering the batch feature mishandles a note title, enabling a cross-site scripting (XSS) vector that can lead to remote code execution via Node integration. Root cause: improper handling of the note title within the batc...