CVE-2026-54158 - SiYuan: Stored XSS to RCE via attribute-view cell rendering in genAVValueHTML()
CVE ID :CVE-2026-54158 Published : June 24, 2026, 9:19 p.m. | 3 hours, 51 minutes ago Description :SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the attribute-view (database) cell renderer genAVValueHTML interpolates cell content raw in four of its branches:...