Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Boostio Component: Boostnote Clear all filters
TI-2019-09100 CVE-2019-12184 · GHSA-265c-455f-fm59

There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a…

Priority LOW 26

There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label named flowchart, sequence, gallery, or chart, as demonstrated by a crafted SRC attribute of an IFRAME element, a different vu…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00667 Published 2019-05-19 No fix listed CWE-79