| Package | Affected versions | Patched versions |
|---|---|---|
| leanote | = 2.7.0 |
Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note. This leads to remote code execution with payload : <video src=x onerror=(function(){require('child_process').exec('calc');})();>
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free