GitHub Advisoryadvisory · Go

GHSA-99g5-5643-xphp mm-wiki is vulnerable to Cross-Site Scripting (XSS)

MEDIUM Published 2022-11-10 Modified 2022-11-15 Official page ↗
Aliases
CVE-2021-40289
Ecosystem
Go
Packages
github.com/phachon/mm-wiki
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2022-11-10

Affected packages

• Go github.com/phachon/mm-wiki: <= 0.2.1 (no fix yet)

Description

mm-wki v0.2.1 is vulnerable to Cross Site Scripting (XSS).

Related

Alias · CVE (1)

  • CVE-2021-40289 mm-wki v0.2.1 is vulnerable to Cross Site Scripting (XSS). vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References