Vulnerabilities (CVE)

Filtered by vendor Mm-wiki Project Subscribe
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-39394 1 Mm-wiki Project 1 Mm-wiki 2024-11-21 N/A 6.5 MEDIUM
mm-wiki v0.2.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add user accounts and modify user information.
CVE-2021-39393 1 Mm-wiki Project 1 Mm-wiki 2024-11-21 N/A 6.1 MEDIUM
mm-wiki v0.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the markdown editor.
CVE-2020-19278 1 Mm-wiki Project 1 Mm-wiki 2024-11-21 N/A 8.8 HIGH
Cross Site Request Forgery vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code via the system/user/save parameter.
CVE-2020-19277 1 Mm-wiki Project 1 Mm-wiki 2024-11-21 N/A 5.4 MEDIUM
Cross Site Scripting vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code via javascript code in the markdown editor.