CVE-2018-18524

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Evernote 6.15 on Windows has an incorrectly repaired stored XSS vulnerability. An attacker can use this XSS issue to inject Node.js code under Present mode. After a victim opens an affected note under Present mode, the attacker can read the victim's files and achieve remote execution command on the victim's computer.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: May 13, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-185279.8OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter.CVE-2018-185299.8ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles th CVE-2018-18536.1IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) could allow a remote attacker to hijack the clicking action of the victim. By CVE-2018-185309.8ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate CVE-2018-185319.8text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 us CVE-2018-185357.8The Asusgio low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes functionality to read and write Machine Specific Registers (MSRs CVE-2018-185367.8The GLCKIo and Asusgio low-level drivers in ASUS Aura Sync v1.07.22 and earlier expose functionality to read/write data from/to IO ports. Th CVE-2018-185375.5The GLCKIo low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes a path to write an arbitrary DWORD to an arbitrary address.CVE-2018-185406.1TeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL.CVE-2018-185417.5In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote CVE-2018-185446.5There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coder CVE-2018-185456.1Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.