medium5.4
CVE-2018-19658
The Markdown editor in YXBJ before 8.3.2 on macOS has stored XSS.
Impact
The Markdown editor in YXBJ before 8.3.2 on macOS has stored XSS. This behavior may be encountered by some Evernote users; however, it is a vulnerability in YXBJ, not a vulnerability in Evernote.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Evernote | Yinxiang Biji | before 8.3.2 |