3 matches found
EUVD-2021-30721
Malicious code in bioql PyPI...
EUVD-2021-30722
Malicious code in bioql PyPI...
CVE-2021-43855 Stored XSS via SVG in Requarks/wiki
Wiki.js is a wiki app built on node.js. Wiki.js 2.5.263 and earlier is vulnerable to stored cross-site scripting through a SVG file upload made via a custom request with a fake MIME type. By creating a crafted SVG file, a malicious Wiki.js user may stage a stored cross-site scripting attack. This...