CVE:CVE-2021-4263
CNNVD:CNNVD-202212-3706
Leanote是一款开源的记事本应用程序。
Leanote 存在跨站脚本漏洞，该漏洞源于文件 public/js/plugins/history.js 的函数定义，参数内容的操纵导致跨站脚本。
solution:Upgrade leanote leanote to a higher version than 2021-03-27,and avoid the version (,2021-03-27)