Beveiligingsadvies

CVE-2026-24045

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-10 16:56:37

Laatst bijgewerkt 2026-04-14 21:36:07

Toegewezen door GitHub_M

CVSS-score 7.3

Status PUBLISHED

Beschrijving

Docmost is open-source collaborative wiki and documentation software. From 0.20.0 and before 0.25.0, the public share page functionality in Docmost does not properly HTML-escape page titles before inserting them into meta tags and the title tag. This allows Stored Cross-Site Scripting (XSS) attacks, where an attacker can execute arbitrary JavaScript in the context of any user who opens a shared page link. This vulnerability is fixed in 0.25.0.

← Alle CVE's bekijken Bekijk op cve.org ↗