WikiDiscover 安全漏洞

WikiDiscover is a Miraheze open source extension for CreateWiki hosted farms. A security vulnerability exists in WikiDiscover that stems from not performing any escaping of the wiki's name or description. An attacker exploited the vulnerability to perform a cross-site scripting attack...

CVE-2024-47782: Improper Neutralization of Input During Web Page Generation

WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. Special:WikiDiscover is a special page that lists all wikis on the wiki farm. However, the special page does not make any effort to escape the wiki name or description. Therefore, if a wiki sets its nam...

Pepperminty Wiki 跨站脚本漏洞

Pepperminty Wiki is an open source complete wiki engine contained in a single file. Pepperminty Wiki suffers from a cross-site scripting vulnerability that stems from insufficient cleaning of user-supplied data in the Wiki Name field. An attacker can exploit this vulnerability to inject and execu...