CVE-2021-21383

Wiki.js an open-source wiki app built on Node.js. Wiki.js before version 2.5.191 is vulnerable to stored cross-site scripting through mustache expressions in code blocks. This vulnerability exists due to mustache expressions being parsed by Vue during content injection even though it is contained...

CVE-2021-21383

Wiki.js (Node.js-based wiki app) prior to version 2.5.191 is affected by a stored cross-site scripting (XSS) flaw in code blocks due to mustache expressions being parsed by Vue during content injection inside a element. The issue arises when a crafted wiki page triggers execution of malicious Ja...