Threats tagged 'ghsa-v3h3-59vx-wx73'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.4	EPSS 0.5%	CVE-2026-73042siyuan · Cross-site Scripting Critical9.4EPSS 0.5%2026-08-15CVE Database V5CVE-2026-73042 SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allowing stored values to execute script when users open group, view, or field-edit menus. Attackers can inject markup through field descriptions or names that close containing elements and execute arbitrary code via event handlers, reaching Node built-ins due to Electron's insecure configuration. EPSS 0.5%Vulnerability siyuan-note #ghsa-v3h3-59vx-wx73	CVE Database V5	2026-08-15

Page 1 of 1