CVE-2021-43721

Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note

published March 28, 2022

CVSS
—
EPSS
1%
Percentile
64.3
In the wild
Unconfirmed
What it is

Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note. This leads to remote code execution with payload : <video src=x onerror=(function(){require('child_process').exec('calc');})();>

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01061 · 64.3th percentile
Published
2022-03-28T13:37Z
EPSS history
Timeline
  • 28 MAR 13:37Z
    Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note
    cvelistv5