CVE-2021-40289

mm-wki v0.2.1 is vulnerable to Cross Site Scripting XSS...

CVE-2021-40289

mm-wki v0.2.1 is vulnerable to Cross Site Scripting XSS...

CVE-2021-40289

CVE-2021-40289 affects mm-wki/mm-wiki v0.2.1 with a Cross-Site Scripting (XSS) flaw. The issue arises from insufficient input sanitization on the create-new-space page, enabling script execution via user-provided data. CVSSv3.1 metrics show a Network attack vector, Low attack complexity, No privi...