← All advisories

Critical severity9.6NVD Advisory· Published Dec 10, 2020· Updated Jun 17, 2026

CVE-2020-16608

CVE-2020-16608

Description

Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).

Affected products

3

notable/Notable3 versions
cpe:2.3:a:notable:notable:1.8.4:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:notable:notable:1.8.4:*:*:*:*:*:*:*
- (no CPE)range: <=1.8.4
- (no CPE)

Patches

Vulnerability mechanics

References

1

sghosh2402.medium.com/cve-2020-16608-8cdad9f4d9b4nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.