Read the docs

siyuan-note

Records243All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical67CVSS 9.0–10.0
CVSS high89CVSS 7.0–8.9

Exploited now

siyuan-note records in CISA KEV

No siyuan-note vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Solo · all components

Priority LOW 29

b3log Solo 2.9.3 has XSS in the Input page under the "Publish Articles" menu with an ID of "articleTags" stored in the "tag" JSON field, which allows remote attackers to inject arbitrary Web scripts or HTML via a careful…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00996 Published 2019-06-20 No fix listed CWE-79
Priority LOW 23

In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to inject arbitrary Web scripts or HTML via a crafted site name…

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0076 Published 2018-09-10 No fix listed CWE-79
Open these records in search →