CVE-2017-1000459: Improper Neutralization of Input During Web Page Generation

Leanote version = 2.5 is vulnerable to XSS due to not sanitized input in markdown notes...