Evernote for Windows patch resolves stored XSS vulnerability