CVE-2017-12979
DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/x
DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/xhtml.php. An attacker can create or edit a wiki with this element to trigger JavaScript execution.
MEDIUM · CVSS 6.1
EPSS 0.00347
Schedule remediation
- Public exploit or PoC is available
Sigma rules0
YARA rules0