CVE-2018-19658: Evernote Yinxiang Biji

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

The Markdown editor in YXBJ before 8.3.2 on macOS has stored XSS. This behavior may be encountered by some Evernote users; however, it is a vulnerability in YXBJ, not a vulnerability in Evernote.

Affected products

• Evernote Yinxiang Biji: before 8.3.2 (fixed in 8.3.2)

Published 2020-03-02. Last modified 2026-06-17.