CVE-2026-91021 | Trilium Notes up to 0.103.0 Share Renderer webViewSrc cross site scripting

A vulnerability labeled as problematic has been found in Trilium Notes up to 0.103.0. The impacted element is an unknown function of the component Share Renderer. Executing a manipulation of the argument webViewSrc can lead to cross site scripting.

This vulnerability is registered as CVE-2026-91021. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More