Cross-site Scripting (XSS)

github.com/leanote/leanote is vulnerable cross-site scripting XSS. The attack is possible due to lack of sanitization in markdown note provided by user...