CVE-2026-15505

Name of the Vulnerable Software and Affected Versions vnotex vnote versions prior to 3.20.2

Description A weakness in the YAML Frontmatter component within the file /src/data/extra/web/js/markdownit.js allows for remote cross-site scripting. This occurs through the manipulation of the p metaData argument. Cross-site scripting is a technique where malicious scripts are injected into trusted websites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.