Security Advisory
CVE-2015-5875
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Cross-site scripting (XSS) vulnerability in Notes in Apple OS X before 10.11 allows local users to inject arbitrary web script or HTML via crafted text.