Security Advisory
CVE-2018-13433
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element.