CVE-2026-109557

EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attackers to inject script through notebook names or memo titles. Attackers can set malicious names via MCP createnotebook, renamenotebook or creatememo tools, running script on drag wi...

CVE-2026-109557 EdgeEver through 1.112.0 Stored XSS via setMemoDragPreview Drag Preview

EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attackers to inject script through notebook names or memo titles. Attackers can set malicious names via MCP createnotebook, renamenotebook or creatememo tools, running script on drag wi...

CVE-2026-109557

Versions of EdgeEver through 1.112.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability located in the setMemoDragPreview function. An attacker can inject malicious scripts by setting compromised notebook names or memo titles using the MCP create_notebook , rename_notebook , or c...

EUVD-2026-97880

EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attackers to inject script through notebook names or memo titles. Attackers can set malicious names via MCP createnotebook, renamenotebook or creatememo tools, running script on drag wi...