CVE-2017-12979

DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/xhtml.php

published August 21, 2017

CVSS
—
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/xhtml.php. An attacker can create or edit a wiki with this element to trigger JavaScript execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01372 · 71.6th percentile
Published
2017-08-21T07:00Z
EPSS history
Timeline
  • 21 AUG 07:00Z
    DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/xhtml.php
    cvelistv5