← All advisories

Medium severity6.1NVD Advisory· Published Mar 28, 2022· Updated Jun 17, 2026

CVE-2021-43721

CVE-2021-43721

Description

Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note. This leads to remote code execution with payload :

Affected products

4

Leanote/Leanote3 versions
cpe:2.3:a:leanote:leanote:2.7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:leanote:leanote:2.7.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =2.7.0
Leanote/Desktop Appllm-fuzzy
Range: =2.7.0

Patches

Vulnerability mechanics

References

1

github.com/leanote/desktop-app/issues/364nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.