TI-2021-03121 CVE-2021-4263 · GHSA-6cmv-2548-82v4
leanote history.js define cross site scripting
Priority LOW 28
A vulnerability, which was classified as problematic, has been found in leanote 2.6.1.
Vulnerabilities
7 records
TI-2021-19542 CVE-2021-43721 · GHSA-8mh9-7j76-5m8p
Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note.
Priority LOW 29
Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note.
TI-2020-15991 CVE-2020-26157 · GHSA-pcw2-q3mm-wc8g
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during…
Priority MEDIUM 45
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing.
TI-2020-15992 CVE-2020-26158 · GHSA-v78j-8xxm-8wgf
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the…
Priority MEDIUM 45
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered.
TI-2019-15945 CVE-2019-1010003 · GHSA-2vjx-rcxr-r2p5
Leanote prior to version 2.6 is affected by: Cross Site Scripting (XSS).
Priority LOW 28
Leanote prior to version 2.6 is affected by: Cross Site Scripting (XSS).
TI-2018-13119 CVE-2018-18553 · GHSA-h839-88jf-jx3g
Leanote 2.6.1 has XSS via the Blog Basic Setting title field, which is mishandled during rendering of the "likes" page.
Priority LOW 29
Leanote 2.6.1 has XSS via the Blog Basic Setting title field, which is mishandled during rendering of the "likes" page.
TI-2017-14670 CVE-2017-1000459 · GHSA-w5wv-gp3f-2868
Leanote version <= 2.5 is vulnerable to XSS due to not sanitized input in markdown notes
Priority LOW 29
Leanote version <= 2.5 is vulnerable to XSS due to not sanitized input in markdown notes