GHSA-f7rp-xx67-4pj9
Phachon mm-wiki vulnerable to stored cross-site scripting (XSS)
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/phachon/mm-wiki | <= 0.1.2 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Phachon mm-wiki v.0.1.2 vulnerable to stored cross-site scripting (XSS). This could allow a remote attacker to execute arbitrary code via JavaScript code in the markdown editor. Any user browsing the document containing XSS malicious code will trigger the vulnerability.
References
External links from the advisory. They lead to third-party sites.