Security Advisory

CVE-2026-24045

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-10 16:56:37

Last updated 2026-04-14 21:36:07

Assigner GitHub_M

State PUBLISHED

Description

Docmost is open-source collaborative wiki and documentation software. From 0.20.0 and before 0.25.0, the public share page functionality in Docmost does not properly HTML-escape page titles before inserting them into meta tags and the title tag. This allows Stored Cross-Site Scripting (XSS) attacks, where an attacker can execute arbitrary JavaScript in the context of any user who opens a shared page link. This vulnerability is fixed in 0.25.0.

← Browse all CVEs View on cve.org ↗