medium5.4
CVE-2020-19277
Phachon mm-wiki vulnerable to stored cross-site scripting (XSS)
Impact
Phachon mm-wiki v.0.1.2 vulnerable to stored cross-site scripting (XSS). This could allow a remote attacker to execute arbitrary code via JavaScript code in the markdown editor. Any user browsing the document containing XSS malicious code will trigger the vulnerability.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/phachon/mm-wiki | <= 0.1.2 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mm-Wiki Project | Mm-Wiki | Version 0.1.2 |