CVE-2020-15274

CVE-2020-15274 — Wiki.js : A stored XSS was possible via page titles in Wiki.js before v2.5.162, exploitable through search results where the title text wasn’t properly escaped. The root cause, as described, was incomplete escaping in search results content, while navigation links and the actual ...