CVE-2026-47900 | logseq up to 0.10.15 package.json Name cross site scripting

A vulnerability marked as problematic has been reported in logseq up to 0.10.15. Affected is an unknown function of the file package.json. Performing a manipulation of the argument Name results in cross site scripting.

This vulnerability is known as CVE-2026-47900. Remote exploitation of the attack is possible. No exploit is available.