medium5.4
CVE-2021-26834
A cross-site scripting (XSS) vulnerability exists in Znote 0.5.2.
Impact
A cross-site scripting (XSS) vulnerability exists in Znote 0.5.2. An attacker can insert payloads, and the code execution will happen immediately on markdown view mode.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Znote | Znote | Version 0.5.2 |