48 matches found
CVE-2020-7680
docsify prior to 4.11.4 is susceptible to Cross-site Scripting XSS. Docsify.js uses fragment identifiers parameters after sign to load resources from server-side .md files. Due to lack of validation here, it is possible to provide external URLs after the // domain.com///attacker.com and render...
EUVD-2021-0585
Malware in sbrugna...
EUVD-2021-1169
Malware in sbrugna...
EUVD-2022-2591
Malicious code in bioql PyPI...
CVE-2021-30074
docsify 4.12.1 is affected by Cross Site Scripting XSS because the search component does not appropriately encode Code Blocks and mishandles the " character...
@shoplo/kit-vue (>=1.17.0, <=1.22.16), dm-cli (>=0.4.1-0, <=0.4.5) potentially affected by CVE-2021-30074 via docsify (>=4.2.1, <=4.9.1)
docsify NPM version =4.2.1, =1.17.0, =0.4.1-0, =0.4.5 Source cves: CVE-2021-30074 Source advisory: OSV:GHSA-5H7X-68WJ-JHWC...
Docsify vulnerable to cross-site scripting due to mishandled encoding
docsify versions 4.12.1 and earlier are vulnerable to cross-site scripting XSS because the search component does not appropriately encode Code Blocks and mishandles the " character...
GHSA-5H7X-68WJ-JHWC Docsify vulnerable to cross-site scripting due to mishandled encoding
docsify versions 4.12.1 and earlier are vulnerable to cross-site scripting XSS because the search component does not appropriately encode Code Blocks and mishandles the " character...
Cross-Site Scripting (XSS)
Overview docsify prior to 4.11.4 is susceptible to Cross-site Scripting XSS. Docsify.js uses fragment identifiers parameters after sign to load resources from server-side .md files. Due to lack of validation here, it is possible to provide external URLs after the // domain.com///attacker.com and...
@shoplo/kit-vue (>=1.17.0, <=1.22.16), dm-cli (>=0.4.1-0, <=0.4.5) potentially affected by CVE-2020-7680 via docsify (>=4.2.1, <=4.9.1)
docsify NPM version =4.2.1, =1.17.0, =0.4.1-0, =0.4.5 Source cves: CVE-2020-7680 Source advisory: OSV:GHSA-QPQH-46QJ-VWCW...
Cross-site Scripting in docsify
docsify prior to 4.11.4 is susceptible to Cross-site Scripting XSS. Docsify.js uses fragment identifiers parameters after sign to load resources from server-side .md files. Due to lack of validation here, it is possible to provide external URLs after the // domain.com///attacker.com and render...
GHSA-QPQH-46QJ-VWCW Cross-site Scripting in docsify
docsify prior to 4.11.4 is susceptible to Cross-site Scripting XSS. Docsify.js uses fragment identifiers parameters after sign to load resources from server-side .md files. Due to lack of validation here, it is possible to provide external URLs after the // domain.com///attacker.com and render...
CVE-2021-30074
docsify 4.12.1 is affected by Cross Site Scripting XSS because the search component does not appropriately encode Code Blocks and mishandles the " character...
CVE-2021-30074
docsify 4.12.1 is affected by Cross Site Scripting XSS because the search component does not appropriately encode Code Blocks and mishandles the " character...
Cross site scripting
docsify 4.12.1 is affected by Cross Site Scripting XSS because the search component does not appropriately encode Code Blocks and mishandles the " character...
CVE-2021-30074
docsify 4.12.1 is affected by Cross Site Scripting XSS because the search component does not appropriately encode Code Blocks and mishandles the " character...
CVE-2021-30074
docsify 4.12.1 is affected by Cross Site Scripting XSS because the search component does not appropriately encode Code Blocks and mishandles the " character...
docsify 跨站脚本漏洞
docsify is a documentation website generator. A cross-site scripting vulnerability exists in docsify 4.12.1, which stems from the search component not properly coding code blocks and incorrectly handling "characters"...
PT-2021-18595
Name of the Vulnerable Software and Affected Versions docsify versions 4.12.1 and earlier Description The issue arises from the search component's failure to properly encode Code Blocks and its mishandling of the " character, leading to Cross Site Scripting XSS. Recommendations For versions 4.12....
CVE-2021-30074: Improper Neutralization of Input During Web Page Generation
docsify 4.12.1 is affected by Cross Site Scripting XSS because the search component does not appropriately encode Code Blocks and mishandles the " character...