VendorsB3logsiyuan3.5.4
Vulnerabilities

B3log (Yunnan Liandi Technology Co., Ltd) SiYuan 3.5.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2026-23645
SiYuan Vulnerable to Stored Cross-Site Scripting (XSS) via Unrestricted SVG File Upload
Published 2026-01-16 · Analyzed
6.1EPSS 0.003
CVE-2026-25647
Lute has a Stored Cross-Site Scripting (XSS) via Markdown hyperlink
Published 2026-02-06 · Analyzed
5.4EPSS 0.003