A vulnerability labeled as problematic has been found in SiYuan up to 3.6.x. Affected is an unknown function of the file kernel/bazaar/readme.go of the component Setting Handler. The manipulation results in cross site scripting.
This vulnerability is cataloged as CVE-2026-54070. The attack may be launched remotely. There is no exploit available.
The affected component should be upgraded.
