Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ed1S0Nzo

#20364of 53,630
12.6Total CVSS
Vulnerabilities · 2
Medium
2
PT-2022-10907
6.1
2022-08-26
Mm-Wiki · Mm-Wiki · CVE-2021-39393
**Name of the Vulnerable Software and Affected Versions** mm-wiki version 0.2.1 **Description** The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability was discovered in the markdown editor of the software. **Recommendations** For mm-wiki version 0.2.1, update to a version that fixes the XSS vulnerability in the markdown editor.
PT-2022-10908
6.5
2022-08-26
Mm-Wiki · Mm-Wiki · CVE-2021-39394
**Name of the Vulnerable Software and Affected Versions** mm-wiki version 0.2.1 **Description** The issue allows attackers to perform Cross-Site Request Forgery (CSRF) attacks, enabling them to arbitrarily add user accounts and modify user information. **Recommendations** For mm-wiki version 0.2.1, consider implementing CSRF protection mechanisms, such as token-based validation, to prevent unauthorized requests. As a temporary workaround, restrict access to user account management features until a patch is available.