CVE-2024-42758

CVE-2024-42758 A Cross-site Scripting XSS vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki Open Source Wiki Engine. A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwik...

CVE-2024-42758

A Cross-site Scripting XSS vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki Open Source Wiki Engine. A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is the...

CVE-2024-42758

A Cross-site Scripting XSS vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki Open Source Wiki Engine. A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is the...

DokuWiki 安全漏洞

DokuWiki is an easy-to-use and versatile open source Wiki software from DokuWiki Open Source. A security vulnerability exists in DokuWiki version v2024-01-05, which originates from a stored cross-site scripting attack that can be triggered by an attacker entering a cross-site scripting load when...

CVE-2024-42758

A Cross-site Scripting XSS vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki Open Source Wiki Engine. A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is the...

CVE-2024-42758

A stored Cross-site Scripting (XSS) vulnerability exists in version v2024-01-05 of the indexmenu plugin when enabled in DokuWiki (Open Source Wiki Engine). A malicious attacker can inject XSS payloads while creating or editing a page; due to DokuWiki's design, these payloads are stored in .txt fi...

CVE-2024-42758

A Cross-site Scripting XSS vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki Open Source Wiki Engine. A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is the...

PT-2024-30128 · Dokuwiki · Indexmenu Plugin

Name of the Vulnerable Software and Affected Versions: indexmenu plugin version v2024-01-05 Description: A Cross-site Scripting XSS issue exists in the indexmenu plugin for Dokuwiki. This allows a malicious attacker to input XSS payloads, for example, when creating or editing a page. The XSS is...