Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
leanote history.js define cross site scripting
Vulnerability Description
A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of the patch is 0f9733c890077942150696dcc6d2b1482b7a0a19. It is recommended to apply a patch to fix this issue. The identifier VDB-216461 was assigned to this vulnerability.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Leanote 跨站脚本漏洞
Vulnerability Description
Leanote是一款开源的记事本应用程序。 Leanote 存在跨站脚本漏洞，该漏洞源于文件 public/js/plugins/history.js 的函数定义，参数内容的操纵导致跨站脚本。
CVSS Information
N/A
Vulnerability Type
N/A