CyberRota Analysis
AI-GeneratedThe vulnerability affects SiYuan versions prior to 3.7.4, where attribute-view field names are stored without HTML escaping, allowing attackers to inject malicious markup into the sort menu. This can lead to arbitrary JavaScript execution, particularly when Node integration is enabled in the desktop client, posing a critical risk to user systems. Organizations using affected versions of SiYuan should prioritize immediate updates to mitigate this severe security threat.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them directly into option elements via innerHTML in the sort menu. Attackers can inject markup by renaming a database field to execute arbitrary JavaScript when users open the sort menu, with Node integration enabled in the desktop client enabling code execution.