PT-2026-64996

Name of the Vulnerable Software and Affected Versions SiYuan desktop versions prior to 3.7.2 Description A reflected cross-site scripting issue exists in the bazaar plugin readme handler. An attacker can execute arbitrary code by crafting a malicious siyuan:// deep link. By injecting HTML payload...