CVE-2020-16608

9.6 criticalEPSS 4.5%

Critical (9.6) in notable notable. EPSS 4.5% chance of exploitation in the next 30 days.

Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).

Severity

9.6 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS: 4.5% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-12-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19