system
Describe <CVE-2019-12136>.
user
What is <CVE-2019-12136>?
assistant
There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element..