MDwiki vulnerabilities

CVEs whose affected-version data names the MDwiki package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2017-20239Medium· 6.1PoC

5mo ago

MDwiki Cross-Site Scripting via Location Hash Parameter

MDwiki contains a cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by injecting malicious code through the location hash parameter. Attackers can craft URLs with JavaScript payloads in the h…

▾ TwilightDynalon · MDwikiEPSS 0.27%via CVEORG