Read the docs
TI-2020-03541 Aliases CVE-2020-4052

Stored XSS through template injection in Wiki.js

Priority LOW 30CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

In Wiki.js before 2.4.107, there is a stored cross-site scripting through template injection. This vulnerability exists due to an insecure validation mechanism intended to insert v-pre tags into rendered HTML elements which contain curly-braces. By creating a crafted wiki page, a malicious Wiki.js user may stage a stored cross-site scripting attack. This allows the attacker to execute malicious JavaScript when the page is viewed by other users. This has been patched in 2.4.107.

Why it matters now

EPSS 0.00856 58th percentileScored 2026-11-07
Fix Fixed Wiki.js (Requarks.io): 2.4.107

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Requarks.ioWiki.jsbefore 2.4.1072.4.107Patch availableCNA
  • Wiki.js VendorRequarks.io Affected before 2.4.107 Fixed in 2.4.107 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:requarks:wiki.js:*:*:*:*:*:*:*:*before 2.4.107VulnerableRequarks
  • cpe:2.3:a:requarks:wiki.js:*:*:*:*:*:*:*:* Versions before 2.4.107 Vulnerable ·Requarks

Remediation

  • Fix · CNA Wiki.js (Requarks.io) Fixed in 2.4.107

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-4052

References

Patch 1

Advisory 1

  • TI-2026-32203 Wiki.js: Privilege Escalation via Missing Group Validation in users.update CVSS 4.0HIGH 8.6
  • TI-2021-07999 Requarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editor CVSS 3.1MEDIUM 5.4
  • TI-2025-35387 Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a… CVSS 3.1CRITICAL 9.1
  • TI-2020-12008 Directory Traversal in Wiki.js CVSS 3.1HIGH 8.6
  • TI-2022-07706 Improper write access check in Requarks/wiki CVSS 3.1HIGH 8.1
  • TI-2021-19662 Stored XSS in non-image uploads in Requarks/wiki CVSS 3.1HIGH 8.2
See all 13 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences