| Package | Affected versions | Patched versions |
|---|---|---|
| leanote | ≤ 2.6.2 |
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free