THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-73052 (CRITICAL 9.0) — SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them directly into option elements via innerHTML in the sort menu. Attackers can inject markup by renaming a database field to execute arbitrary JavaScript when users open the sort menu,

[NVD] CVE-2026-73052 (CRITICAL 9.0) — SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them directly into option elements via innerHTML in the sort menu. Attackers can inject markup by renaming a database field to execute arbitrary JavaScript when users open the sort menu,

mednvdPublished 2026-08-15

CVE-2026-73052 CVSS: 9.0 CRITICAL Published: 2026-08-15T22:16:55.017

SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them directly into option elements via innerHTML in the sort menu. Attackers can inject markup by renaming a database field to execute arbitrary JavaScript when users open the sort menu, with Node integration enabled in the desktop clie

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-73052cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-73052