CVE-2026-75916 | SiYuan Note up to 3.7.3 Autocomplete Hint Popup extend.ts genHintItemHTML cross site scripting

A vulnerability categorized as problematic has been discovered in SiYuan Note SiYuan up to 3.7.3. This impacts the function genHintItemHTML of the file app/src/protyle/hint/extend.ts of the component Autocomplete Hint Popup. The manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-75916. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More