CVE-2020-35717 in zonote
Resumen
por MITRE • 2021-01-01
zonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because nodeIntegration in webPreferences is true).
If you want to get the best quality for vulnerability data then you always have to consider VulDB.