Debian/dokuwiki: medium 6.1
DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/xhtml.php. An attacker can create or edit a wiki with this element to trigger Jav
Action: Upgrade dokuwiki to 0.0.20180422.a-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.20180422.a-1 | - |
Fixed versions
| 0.0.20180422.a-1 |
Sources
published · modified · JSON