Cross-site Scripting (XSS)

github.com/usememos/memos is vulnerable to stored Cross-site Scripting XSS. The vulnerability exists in registerResourcePublicRoutes function at resource.go because the resources upload feature does not restrict the type of uploaded file, allowing an attacker to inject and execute arbitrary...

Cross-site Scripting (XSS)

github.com/usememos/memos is vulnerable to stored Cross-site Scripting XSS. The vulnerability exists registerResourcePublicRoutes function at resource.go because the default-src in CSP is not properly configured which allows an attacker to bypass the CSP, inject and execute arbitrary javascript...

GHSA-9W8X-5HV5-R6GW Cross Site Scripting in usememos/memos

All versions of the package github.com/usememos/memos/server prior to 0.11.0 are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...

Cross Site Scripting in usememos/memos

All versions of the package github.com/usememos/memos/server prior to 0.11.0 are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...

CVE-2022-25978

All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...

Cross site scripting

All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...

CVE-2022-25978

All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...

usememos/memos vulnerable to stored Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

GHSA-PCVH-PX2P-VMXW usememos/memos vulnerable to stored Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0107

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0110

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0106

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0108

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0112

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0106 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0107 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0112 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...