CVE-2021-26834: Znote

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability exists in Znote 0.5.2. An attacker can insert payloads, and the code execution will happen immediately on markdown view mode.

Affected products

• Znote Znote: version 0.5.2 only

Published 2021-06-18. Last modified 2026-06-17.