Linbreux

2 exploits Active since Sep 2022
CVE-2022-36080 WRITEUP MEDIUM WRITEUP
Wikmd <1.7.1 - XSS
Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, an attacker could capture user's session cookies or execute malicious Javascript when a victim edits a markdown file. Version 1.7.1 fixes this issue.
CVSS 6.1
CVE-2022-36081 WRITEUP HIGH WRITEUP
Wikmd <1.7.1 - Path Traversal
Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, Wikmd is vulnerable to path traversal when accessing `/list/<path:folderpath>` and discloses lists of files located on the server including sensitive data. Version 1.7.1 fixes this issue.
CVSS 7.5