MEDIUM5.4

GHSA-f7rp-xx67-4pj9

Phachon mm-wiki vulnerable to stored cross-site scripting (XSS)

Details

Phachon mm-wiki v.0.1.2 vulnerable to stored cross-site scripting (XSS). This could allow a remote attacker to execute arbitrary code via JavaScript code in the markdown editor. Any user browsing the document containing XSS malicious code will trigger the vulnerability.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/phachon/mm-wiki

Introduced in: 0

No fixed version published yet for github.com/phachon/mm-wiki (go modules). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2020-19277[ADVISORY]
https://github.com/phachon/mm-wiki/issues/68[WEB]
https://github.com/phachon/mm-wiki[PACKAGE]