PT-2026-64997 · Siyuan · Siyuan
CVSS v4.0
9.3
Critical
| Vector | AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
Name of the Vulnerable Software and Affected Versions
SiYuan versions prior to 3.7.2
Description
Stored cross-site scripting is possible due to improper escaping of the
title-img Individual Attribute List value during the rendering of Gallery and Kanban cover images. This occurs via unescaped style attribute interpolation. Users with editor permissions can inject onload handlers to execute arbitrary code within the Electron renderer, which grants full Node.js access when a victim opens the affected documents.Recommendations
Update to version 3.7.2 or later.
Exploit
Fix
RCE
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Siyuan