VendorsB3logsiyuanany version
Vulnerabilities

B3log (Yunnan Liandi Technology Co., Ltd) SiYuan any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

43CVEs
CVE-2026-23847
SiYuan Vulnerable to Reflected Cross-Site Scripting (XSS) via /api/icon/getDynamicIcon
Published 2026-01-19 · Analyzed
6.1EPSS 0.003
CVE-2026-23645
SiYuan Vulnerable to Stored Cross-Site Scripting (XSS) via Unrestricted SVG File Upload
Published 2026-01-16 · Analyzed
6.1EPSS 0.003
CVE-2026-40922
SiYuan: Incomplete sanitization of bazaar README allows stored XSS via iframe srcdoc (incomplete fix for CVE-2026-33066)
Published 2026-04-16 · Modified
5.4EPSS 0.004
← Prev2 / 2