Security Advisory
CVE-2020-35717
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
zonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because nodeIntegration in webPreferences is true).