critical9.6
CVE-2020-16608
Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).
Impact
Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Notable | Notable | Version 1.8.4 |