CVE-2023-49598: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting vulnerability exists in the event handlers of the pre tags in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product...

PT-2020-17853

Name of the Vulnerable Software and Affected Versions Wiki.js versions prior to 2.4.107 Description The issue is caused by an insecure validation mechanism that fails to properly insert v-pre tags into rendered HTML elements containing curly-braces, leading to a stored cross-site scripting...

CVE-2020-4052: Improper Neutralization of Input During Web Page Generation

In Wiki.js before 2.4.107, there is a stored cross-site scripting through template injection. This vulnerability exists due to an insecure validation mechanism intended to insert v-pre tags into rendered HTML elements which contain curly-braces. By creating a crafted wiki page, a malicious Wiki.j...