CVE-2023-0111 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0112 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0106 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0108 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0110 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0111 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0112 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0107 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0108

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0112

CVE-2023-0112 is an XSS vulnerability affecting usememos/memos before version 0.10.0. The issue is a Stored XSS in the GitHub repository where user input can be stored and later rendered. Documents confirm affected software, vulnerable component/file (the memos codebase prior to 0.10.0), and the ...

CVE-2023-0111

CVE-2023-0111 affects usememos/memos prior to 0.10.0. The vulnerability is a stored Cross-site Scripting (XSS) flaw in how user input is stored and later rendered in the app. Public notes indicate the issue exists in the GitHub repository and related advisories; remediation is to upgrade to versi...

CVE-2023-0108

CVE-2023-0108 is a stored cross-site scripting (XSS) vulnerability in the open-source memos project (usememos/memos) prior to version 0.10.0. Multiple connected sources confirm stored XSS in GitHub repository code, including reports tying the issue to the Resources module and the ability for atta...

CVE-2023-0110

CVE-2023-0110 is a stored XSS vulnerability in usememos/memos prior to 0.10.0. The issue is described across multiple sources as a stored XSS in the web app, with some references noting that the root cause relates to CSP being too permissive or not sufficiently restrictive. The affected component...

CVE-2023-0112

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0110

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0111: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0106: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

PT-2023-16019 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.10.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation or escaping, allowing an attack...

PT-2023-16018 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.10.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing attackers to inject...

PT-2023-16017 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.10.0 Description: The issue is related to stored Cross-site Scripting XSS in the GitHub repository usememos/memos. This type of attack involves an attacker injecting malicious scripts into a website, which a...