CVE-2026-97868

Name of the Vulnerable Software and Affected Versions sheshbabu zen versions prior to 1.5.1

Description A remote cross-site scripting issue exists in the Note Editor component within the dangerouslySetInnerHTML function of the features/notes/NotesEditor.jsx file. Cross-site scripting is a technique where malicious scripts are injected into trusted websites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the dangerouslySetInnerHTML function in the features/notes/NotesEditor.jsx file.