EPSS
Percentile
29.5%
xdgithub.com/phachon/mm-wiki is vulnerable to Cross-site Scripting (XSS). The vulnerability exists in the markdown editor because the user roles are not properly restricted which allows an attacker to inject and execute arbitrary javascript.
github.com/advisories/GHSA-f7rp-xx67-4pj9
github.com/phachon/mm-wiki/commit/f1dd8c6bf155e34ddc67d69696292ffab1c01829
github.com/phachon/mm-wiki/issues/68
security-tracker.debian.org/tracker/CVE-2020-19277