Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ares-Xo

#43020of 53,633
6.1Total CVSS
Vulnerabilities · 1
PT-2021-18595
6.1
2021-04-02
Docsify · Docsify · CVE-2021-30074
**Name of the Vulnerable Software and Affected Versions** docsify versions 4.12.1 and earlier **Description** The issue arises from the search component's failure to properly encode Code Blocks and its mishandling of the `"` character, leading to Cross Site Scripting (XSS). **Recommendations** For versions 4.12.1 and earlier, consider disabling the search component until a patch is available to prevent potential XSS attacks. Restrict access to the search functionality to minimize the risk of exploitation. Avoid using the search feature with user-supplied input until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.