CVE-2018-18524 | BDVDB-2026-116276 Detail

Description#

Evernote 6.15 on Windows has an incorrectly repaired stored XSS vulnerability. An attacker can use this XSS issue to inject Node.js code under Present mode. After a victim opens an affected note under Present mode, the attacker can read the victim's files and achieve remote execution command on the victim's computer.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://evernote.com/intl/en/security/updates
https://paper.seebug.org/737/

Exploit#

No public exploit known

History#

Version 12019-05-13Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.