CVE-2026-82653 | siyuan-note SiYuan up to 3.8.0 Bazaar confirmDialog Name cross site scripting

August 30, 2026 Yanac

A vulnerability marked as problematic has been reported in siyuan-note SiYuan up to 3.8.0. This affects the function confirmDialog of the component Bazaar. The manipulation of the argument Name leads to cross site scripting.

This vulnerability is listed as CVE-2026-82653. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More