2018-07-08 12:00:00
mitre
PUBLISHED
Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element.