CVE-2024-2692

9.0 criticalEPSS 0.7%

Critical (9.0) in b3log siyuan. EPSS 0.7% chance of exploitation in the next 30 days.

SiYuan version 3.0.3 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to Server Side XSS.

Severity

9.0 critical

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-04-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19