Serious XSS flaw discovered in Evernote for Windows, update now! Posted on November 7, 2018 by nocrackingzone Online-note-sharing company Evernote has patched a hole that allowed attackers to infect notes shared via its service.