CVE-2022-25978

All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...

Cross site scripting

All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...

GHSA-PCVH-PX2P-VMXW usememos/memos vulnerable to stored Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

usememos/memos vulnerable to stored Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0106

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0112

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0107

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0108

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0110

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0112 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

PT-2023-16018 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.10.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing attackers to inject...

CVE-2023-0110

CVE-2023-0110 is a stored XSS vulnerability in usememos/memos prior to 0.10.0. The issue is described across multiple sources as a stored XSS in the web app, with some references noting that the root cause relates to CSP being too permissive or not sufficiently restrictive. The affected component...

CVE-2023-0111 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0107 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

PT-2023-16016 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.10.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs in the GitHub repository usememos/memos. This type of attack allows an attacker to inject malicious scripts into a...

CVE-2023-0110 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0110 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...