Beveiligingsadvies

CVE-2026-82654

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-30 14:33:35

Laatst bijgewerkt 2026-09-01 14:07:50

Toegewezen door VulnCheck

CVSS-score 9.3

Status PUBLISHED

Beschrijving

SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rendering functions. Attackers can set a block's name to contain HTML/script tags that execute when another user views documents referencing or displaying that block.

← Alle CVE's bekijken Bekijk op cve.org ↗