CVE-2020-7680

Summary of CVE-2020-7680 (docsify XSS) Affected software: docsify prior to version 4.11.4 (docsify.js) which loads resources via fragment identifiers after # (e.g., domain.com/#//attacker.com) to server-side .md files. Root cause: insufficient validation of these fragment URLs allows rendering ar...

CVE-2021-30074

CVE-2021-30074 affects docsify 4.12.1 and earlier, with a Cross Site Scripting (XSS) vulnerability in the search component due to improper encoding of code blocks and mishandling of the quote character. The issue is documented across multiple sources (GHSA, Red Hat, OSV, CVE records) and confirms...