Critical severity9.6NVD Advisory· Published Sep 30, 2020· Updated Jun 17, 2026
CVE-2020-26158
CVE-2020-26158
Description
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration.
Affected products
2- Leanote Desktop/Leanote Desktopdescription
- Range: <=2.6.2
Patches
Vulnerability mechanics
References
1- github.com/leanote/desktop-app/issues/353nvdThird Party Advisory
News mentions
0No linked articles in our index yet.