Debian/dokuwiki: medium 6.1
DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc/parser/xhtml.php. An attacker can create or edit a wiki that uses RSS or Atom data from an attacker-con
Action: Upgrade dokuwiki to 0.0.20180422.a-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.20180422.a-1 | - |
Fixed versions
| 0.0.20180422.a-1 |
Sources
published · modified · JSON