CVE-2021-43721
EUVD-2021-3062828.03.2022, 14:15
Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note. This leads to remote code execution with payload : <video src=x onerror=(function(){require('child_process').exec('calc');})();>Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| leanote | leanote | 2.7.0 |
𝑥
= Vulnerable software versions