6127 matches found
CVE-2022-36573: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Pagekit CMS v1.0.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Markdown text box under /blog/post/edit...
PT-2022-23480 · Unknown · Pagekit Cms
Name of the Vulnerable Software and Affected Versions: Pagekit CMS version 1.0.18 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Markdown text box under the "/blog/post/edit" API endpoint. The Markdow...
CVE-2021-39393
mm-wiki v0.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the markdown editor...
CVE-2021-39393
mm-wiki v0.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the markdown editor...
CVE-2021-39393
mm-wiki v0.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the markdown editor...
Cross site scripting
mm-wiki v0.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the markdown editor...
CVE-2021-39393
mm-wiki v0.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the markdown editor...
CVE-2021-39393
mm-wiki v0.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the markdown editor...
CVE-2021-39393
CVE-2021-39393 affects mm-wiki v0.2.1, with a cross-site scripting (XSS) vulnerability via the markdown editor. The issue stems from insufficient input sanitization, enabling injection of malicious scripts. Impact and remediation details are limited across the provided sources; CVSS indicates a l...
mm-wiki 跨站脚本漏洞
mm-wiki is a Chinese phachon individual developers of a lightweight enterprise knowledge sharing and team collaboration software. It can be used to quickly build enterprise Wiki and team knowledge sharing platform. A security vulnerability exists in mm-wiki v0.2.1, which is caused by cross-site...
CVE-2021-39393: Improper Neutralization of Input During Web Page Generation
mm-wiki v0.2.1 was discovered to contain a cross-site scripting XSS vulnerability via the markdown editor...
PT-2022-10907
Name of the Vulnerable Software and Affected Versions mm-wiki version 0.2.1 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability was discovered in the markdown editor of the software. Recommendations For mm-wiki version 0.2.1, update to a version that...
编号撤回
HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. This CVE number has been withdrawn...
GHSA-42WQ-RCH8-6F6J CKEditor5 cross-site scripting vulnerability caused by the editor instance destroying process
Affected packages @ckeditor/ckeditor5-markdown-gfm @ckeditor/ckeditor5-html-support @ckeditor/ckeditor5-html-embed Impact A cross-site scripting vulnerability has been discovered affecting three optional CKEditor 5's packages. The vulnerability allowed to trigger a JavaScript code after fulfillin...
CKEditor5 cross-site scripting vulnerability caused by the editor instance destroying process
Affected packages @ckeditor/ckeditor5-markdown-gfm @ckeditor/ckeditor5-html-support @ckeditor/ckeditor5-html-embed Impact A cross-site scripting vulnerability has been discovered affecting three optional CKEditor 5's packages. The vulnerability allowed to trigger a JavaScript code after fulfillin...
Stored XSS via image markdown
Description The site allows creating markdown to get an image from a link, from which we can use it to generate XSS. Proof of Concept Payload: markdown Video: Youtube Only works on Google Chrome...
Cross-site Scripting (XSS)
@ckeditor/ckeditor5-markdown-gfm is vulnerable to cross-site scripting. An attacker can inject and execute a malicious javascript if the library uses an unsafe markup configuration inside the editor, initializes the editor on an element that uses an element other than as a base, or destroys the...
Renato 安全漏洞
Renato is an open source knowledge base platform that uses static Markdown files to power your knowledge base. A security vulnerability exists in Renato version v0.17.0 that stems from the use of weak passwords, which can be exploited by an attacker to crack a user's password via a brute-force...
Renato 跨站脚本漏洞
Renato is an open source knowledge base platform that uses static Markdown files to power your knowledge base. A security vulnerability exists in Renato version v0.17.0, which originates from an attacker with local access rights can upload a markdown file with malicious JavaScript that can be...