PT-2020-17853

Name of the Vulnerable Software and Affected Versions Wiki.js versions prior to 2.4.107 Description The issue is caused by an insecure validation mechanism that fails to properly insert v-pre tags into rendered HTML elements containing curly-braces, leading to a stored cross-site scripting...

CVE-2020-4052: Improper Neutralization of Input During Web Page Generation

In Wiki.js before 2.4.107, there is a stored cross-site scripting through template injection. This vulnerability exists due to an insecure validation mechanism intended to insert v-pre tags into rendered HTML elements which contain curly-braces. By creating a crafted wiki page, a malicious Wiki.j...