VYPR
Unrated severityOSV Advisory· Published Jul 8, 2018· Updated Aug 5, 2024

CVE-2018-13433

CVE-2018-13433

Description

Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.