6 matches found
CVE-2022-23375
WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php...
EUVD-2022-28455
Malicious code in bioql PyPI...
CVE-2024-53930
WikiDocs versions prior to 1.0.65 are vulnerable to stored XSS due to the improper neutralization of input during web page generation. The root cause is the mishandling of data by a KaTeX parser , specifically when processing data that follows the $$. authenticated users can exploit this flaw to ...
CVE-2024-53930
WikiDocs before 1.0.65 allows stored XSS by authenticated users via data that comes after $$\, which is mishandled by a KaTeX parser...
Remote code execution
WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php...