CVE-2024-42758

CVE-2024-42758 Dokuwiki（オープンソースWikiエンジン）でindexmenuプラグインのバージョンv2024-01-05が使用され有効になっている場合、クロスサイトスクリプティング（XSS）の脆弱性が存在します。悪意のある攻撃者は、例えば新しいページの作成時や既存ページの編集時にXSSペイロードを入力することで、Dokuwiki上でXSSを引き起こすことができます。このXSSは（Dokuwikiの設計上）.txtファイルに保存され、保存型XSSとなります。 https://vulners.com/cve/CVE-2024-42758 脆弱なDokuwikiページ:...

CVE-2024-42758

A Cross-site Scripting XSS vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki Open Source Wiki Engine. A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is the...

CVE-2024-42758

A Cross-site Scripting XSS vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki Open Source Wiki Engine. A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is the...

DokuWiki 安全漏洞

DokuWiki is an easy-to-use and versatile open source Wiki software from DokuWiki Open Source. A security vulnerability exists in DokuWiki version v2024-01-05, which originates from a stored cross-site scripting attack that can be triggered by an attacker entering a cross-site scripting load when...

CVE-2024-42758

A Cross-site Scripting XSS vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki Open Source Wiki Engine. A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is the...

CVE-2024-42758

A stored Cross-site Scripting (XSS) vulnerability exists in version v2024-01-05 of the indexmenu plugin when enabled in DokuWiki (Open Source Wiki Engine). A malicious attacker can inject XSS payloads while creating or editing a page; due to DokuWiki's design, these payloads are stored in .txt fi...

CVE-2024-42758

A Cross-site Scripting XSS vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki Open Source Wiki Engine. A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is the...

PT-2024-30128 · Dokuwiki · Indexmenu Plugin

Name of the Vulnerable Software and Affected Versions: indexmenu plugin version v2024-01-05 Description: A Cross-site Scripting XSS issue exists in the indexmenu plugin for Dokuwiki. This allows a malicious attacker to input XSS payloads, for example, when creating or editing a page. The XSS is...

CVE-2024-42758: Improper Neutralization of Input During Web Page Generation

A Cross-site Scripting XSS vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki Open Source Wiki Engine. A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is the...

CVE-2024-42758

A Cross-site Scripting XSS vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki Open Source Wiki Engine. A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is the...