← Back

Boostnote

boostnote

Vendor: Boostio • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-12184
1Boostio
1Boostnote
Jun 17, 2026
May 19, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label named flowchart, sequence, gallery, or chart, as demonstrated by a crafted SRC attribute of an IFRAME element, a different vu...Show more
There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label named flowchart, sequence, gallery, or chart, as demonstrated by a crafted SRC attribute of an IFRAME element, a different vulnerability than CVE-2019-12136.Show less
CVE-2019-12136
1Boostio
1Boostnote
Jun 17, 2026
May 16, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element.