2 matches found
CVE-2019-12136
There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element...
5.4CVSS5.1AI score0.00607EPSS
SaveExploits1References1
CVE-2019-12136: Improper Neutralization of Input During Web Page Generation
There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element...
5.4CVSS5.8AI score0.00607EPSS
SaveExploits1References2
20