7 matches found
CVE-2024-42758
A Cross-site Scripting XSS vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki Open Source Wiki Engine. A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is the...
CVE-2024-42758
A Cross-site Scripting XSS vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki Open Source Wiki Engine. A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is the...
PT-2024-30128 · Dokuwiki · Indexmenu Plugin
Name of the Vulnerable Software and Affected Versions: indexmenu plugin version v2024-01-05 Description: A Cross-site Scripting XSS issue exists in the indexmenu plugin for Dokuwiki. This allows a malicious attacker to input XSS payloads, for example, when creating or editing a page. The XSS is...
CVE-2024-42758
CVE-2024-42758 concerns the indexmenu plugin for Dokuwiki (v2024-01-05). The vulnerability is a stored XSS: an attacker can inject scripts via page creation/editing, with the payload ultimately stored in a .txt file due to Dokuwiki’s design, posing a stored XSS risk when pages are viewed. Affecte...
DokuWiki 安全漏洞
DokuWiki is an easy-to-use and versatile open source Wiki software from DokuWiki Open Source. A security vulnerability exists in DokuWiki version v2024-01-05, which originates from a stored cross-site scripting attack that can be triggered by an attacker entering a cross-site scripting load when...
CVE-2024-42758
A Cross-site Scripting XSS vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki Open Source Wiki Engine. A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is the...
CVE-2024-42758
A Cross-site Scripting XSS vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki Open Source Wiki Engine. A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is the...