Beveiligingsadvies

CVE-2026-82653

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-30 14:33:34

Laatst bijgewerkt 2026-09-02 16:01:58

Toegewezen door VulnCheck

CVSS-score 9.3

Status PUBLISHED

Beschrijving

SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package names and notebook names are interpolated directly into innerHTML assignments. Attackers can submit malicious bazaar packages with HTML/script payloads in the name field that execute in users' browsers when uninstalling packages or unlocking encrypted notebooks.

← Alle CVE's bekijken Bekijk op cve.org ↗