← All advisories

Medium severity6.1OSV Advisory· Published Oct 22, 2018· Updated Jun 17, 2026

CVE-2018-18553

CVE-2018-18553

Description

Leanote 2.6.1 has XSS via the Blog Basic Setting title field, which is mishandled during rendering of the "likes" page.

Affected products

3

Leanote/LeanoteOSV3 versions
0.1, 0.2, 0.3, …+ 2 more
- (no CPE)range: 0.1, 0.2, 0.3, …
- cpe:2.3:a:leanote:leanote:2.6.1:*:*:*:*:*:*:*
- (no CPE)range: =2.6.1

Patches

Vulnerability mechanics

References

1

github.com/leanote/leanote/issues/822nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.