CVE-2023-3067: Trilium Project Trilium

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Cross-site Scripting (XSS) - Stored in GitHub repository zadam/trilium prior to 0.59.4.

Affected products

• Trilium Project Trilium: before 0.59.3 (fixed in 0.59.3)

Published 2023-06-02. Last modified 2026-06-17.