CVE-2026-65605 | siyuan-note SiYuan up to 3.7.1 Attribute View innerHTML Template column value cross site scripting

July 23, 2026 Yanac

A vulnerability labeled as problematic has been found in siyuan-note SiYuan up to 3.7.1. This affects the function innerHTML of the component Attribute View. The manipulation of the argument Template column value results in cross site scripting.

This vulnerability is known as CVE-2026-65605. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More