212029 matches found
CVE-2026-75916 SiYuan XSS-to-RCE via unescaped block metadata in hint popup
SiYuan through 3.7.3 contains a cross-site scripting vulnerability in the '' block-reference autocomplete hint popup. In genHintItemHTML app/src/protyle/hint/extend.ts, a candidate block's name, alias, and memo fields are concatenated into the popup's HTML without escaping. An attacker who can se...
MINI-VFXR-W83Q-P3J6
Bulletin has no description...
MINI-JM66-CP6J-9G6J
Bulletin has no description...
MINI-FRJR-QW59-G7M8
Bulletin has no description...
MINI-758Q-RR4R-JG5G
Bulletin has no description...
MINI-QQFX-M2HV-C4H4
Bulletin has no description...
MINI-4W69-5PXJ-F5J2
Bulletin has no description...
MINI-VWJC-6QFP-9X94
Bulletin has no description...
MINI-PJC4-J43M-Q3W9
Bulletin has no description...
MINI-J6X3-QMP9-W7JH
Bulletin has no description...
MINI-HFFV-5W6P-F8CH
Bulletin has no description...
MINI-JFQW-Q62M-H2RW
Bulletin has no description...
MINI-9G93-6684-9C9M
Bulletin has no description...
MINI-Q2W8-GWRW-4XM9
Bulletin has no description...
MINI-55M3-27X8-C6H8
Bulletin has no description...
MINI-R3V5-9GG2-PQ85
Bulletin has no description...
MINI-3VHF-34QR-CWQP
Bulletin has no description...
MINI-8JPH-MXGP-VRPH
Bulletin has no description...