medium5.4
CVE-2019-12136
There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element.
Impact
There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Boostio | Boostnote | Version 0.11.15 |