medium6.8
CVE-2026-116167
SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the unauthenticated /check-auth page that assigns the to parameter to window.lo…
Impact
SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the unauthenticated /check-auth page that assigns the to parameter to window.location.href without scheme validation. Attackers can send a crafted link with a javascript: URI that executes after victim login, invoking kernel APIs to read or modify workspace content and settings.
Affected products
| Product | Affected versions |
|---|---|
| SiYuan From 2.9.0 | before 3.8.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.