TI-2021-06040 CVE-2021-23342 · GHSA-2mm9-c2fx-c7m4
Cross-site scripting (XSS) in docsify
Priority MEDIUM 41
This affects the package docsify before 4.12.0.
Docsifyjs
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Docsifyjs records in CISA KEVNo Docsifyjs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records in Docsify · all components
TI-2020-06200 CVE-2020-7680 · GHSA-qpqh-46qj-vwcw
Cross-site scripting in docsify
Priority LOW 35
docsify prior to 4.11.4 is susceptible to Cross-site Scripting (XSS).
TI-2021-10652 CVE-2021-30074 · GHSA-5h7x-68wj-jhwc
docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component…
Priority LOW 29
docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the " character.