CyberRota Analysis
AI-GeneratedSiYuan versions prior to 3.8.1 are vulnerable to a stored cross-site scripting (XSS) flaw in the confirmDialog() function, allowing attackers to inject malicious HTML or script payloads through unescaped package and notebook names. This vulnerability can lead to the execution of arbitrary scripts in users' browsers during package uninstallation or when unlocking encrypted notebooks. Organizations using SiYuan should prioritize patching this issue to mitigate the risk of client-side attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package names and notebook names are interpolated directly into innerHTML assignments. Attackers can submit malicious bazaar packages with HTML/script payloads in the name field that execute in users' browsers when uninstalling packages or unlocking encrypted notebooks.