Description
Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, an attacker could capture user's session cookies or execute malicious Javascript when a victim edits a markdown file. Version 1.7.1 fixes this issue.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_confirm
https://github.com/Linbreux/wikmd/security/advisories/GHSA-9m4m-6gqx-gfj3
Patch, Third Party Advisory x_refsource_misc
https://github.com/Linbreux/wikmd/commit/259412c47d64d5b85980f95345179fbf05927798
Scores
CVSS v3
6.1
EPSS
0.0025
EPSS Percentile
47.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-79
Status
published
Products (1)
wikmd_project/wikmd
< 1.7.1
Published
Sep 07, 2022
Tracked Since
Feb 18, 2026