Black Friday60% off BLACKFRIDAY2026
Platform
PlansPartners
Resources
ToolsBlogDocs
Sign Up →
high·Web Vulnerabilities·Updated Oct 28, 2026

SiYuan 2.9.0-3.8.6 - Unauthenticated XSS via check-auth "to" Parameter

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsdomain, subdomain, ipv4
CostFree
0
Times Used
continuous scan runs
9
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
7.6
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description

SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the unauthenticated /check-auth page that assigns the to parameter to window.location.href without scheme validation. Attackers can send a crafted link with a javascript: URI that executes after victim login, invoking kernel APIs to read or modify workspace content and settings.

Attack Vector
Network
Privileges Req.
None
User Interaction
P
Affected
siyuanby siyuan-note
AFFECTED< 3.8.7→SAFE ✓≥ 3.8.7
Updated Nov 10, 2026View on NVD →

Check your infrastructure.
Right now.

12,000+ scanners. Free to start. No credit card required.

Browse All Tools