Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Marc Clement

#43058of 53,630
6.1Total CVSS
Vulnerabilities · 1
PT-2022-11666
6.1
2022-12-21
Unknown · Panicsteve W2Wiki · CVE-2021-4271
**Name of the Vulnerable Software and Affected Versions** panicsteve w2wiki (affected versions not specified) **Description** A problematic issue has been found in the function `toHTML` of the file `index.php` of the component Markdown Handler, leading to cross-site scripting. The attack can be launched remotely. **Recommendations** Apply a patch to fix this issue, specifically the patch with the name `8f1d0470b4ddb1c7699e3308e765c11ed29542b6`. As a temporary workaround, consider disabling the `toHTML` function until a patch is available.