CVE-2026-93923

SiYuan through version 3.8.4 is affected by a stored cross-site scripting (XSS) vulnerability caused by a failure to escape heading style attributes when rendering the outline and bookmark dock HTML. Attackers can inject malicious style values by supplying crafted notebooks or calling administrat...