TI-2017-14303 CVE-2017-20239 · GHSA-gp82-mmj7-m5w2MDwiki Cross-Site Scripting via Location Hash ParameterPriority MEDIUM 56MDwiki contains a cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by injecting malicious code through the location hash parameter.CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00266 · Published 2026-04-12 · No fix listed CWE-79