CVE-2017-12979

DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/xhtml.php. An attacker can create or edit a wiki with this element to trigger JavaScript execution...

CVE-2017-12980

DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc/parser/xhtml.php. An attacker can create or edit a wiki that uses RSS or Atom data from an attacker-controlled server to trigger JavaScript execution. The JavaScript can be in an author field, as...

PT-2017-12817

Name of the Vulnerable Software and Affected Versions DokuWiki versions prior to 2017-02-19c Description The issue concerns stored XSS when rendering a malicious language name in a code element, located in /inc/parser/xhtml.php. An attacker can create or edit a wiki with this element to trigger...