bookstack is vulnerable to Cross-Site Request Forgery (CSRF)

bookstack is vulnerable to Cross-Site Request Forgery CSRF...

GHSA-W2F4-HXPM-MQ98 bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type...

Cross-Site Scripting (XSS)

ssddanbrown/bookstack is vulnerable to cross-site scripting XSS. Lack of validation and sanitization allows a remote attacker to inject and execute arbitrary Javascript in a user's browser via the comments...

CVE-2020-5256

BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, which would allow them to execute code on the host system remotely. They would then have the permissions of the PHP process. This most impacts scenarios where non-trusted users...