Wiki.js is al wiki app built on... CVE-2024-34710

- AV AC AU C I A
发布: 2025-04-13
修订: 2025-04-13

Wiki.js is al wiki app built on Node.js. Client side template injection was discovered, that could allow an attacker to inject malicious JavaScript into the content section of pages that would execute once a victim loads the page that contains the payload. This was possible through the injection of a invalid HTML tag with a template injection payload on the next line. This vulnerability is fixed in 2.5.303.

0%
暂无可用Exp或PoC
当前有0条受影响产品信息