CVE-2026-34585 | SiYuan up to 3.6.1 Block cross site scripting (ID 17246)

April 1, 2026 Yanac

A vulnerability identified as problematic has been detected in SiYuan up to 3.6.1. Affected is an unknown function of the component Block Handler. Performing a manipulation results in cross site scripting.

This vulnerability was named CVE-2026-34585. The attack needs to be approached locally. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More