Summary: There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element.Published: Wednesday, May 15, 2019 - 23:29cvss: