Boostnote (Boostio) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 99 known versions, newest CVE from 2019-05-19. Vendor: Boostio.

CVEs of Boostnote

• CVE-2019-12184 - CVSS 5.4 (medium), 2019-05-19: There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label named flowchart, sequence, gallery, or chart, as demonstrated…
• CVE-2019-12136 - CVSS 5.4 (medium), 2019-05-16: There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element.