TI-2020-16031 Aliases CVE-2020-26210 GHSA-vmfp-7cw6-345x

Cross-Site Scripting in BookStack

MEDIUM 40CWE-79Published 2020-11-03 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: Low
User interaction: Required
Attack complexity: Low
Impact type: Cross-site scripting
Confidentiality · integrity · availability: High · High · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

In BookStack before version 0.30.4, a user with permissions to edit a page could add an attached link which would execute untrusted JavaScript code when clicked by a viewer of the page. Dangerous content may remain in the database after this update. If you think this could have been exploited the linked advisory provides a SQL query to test. As a workaround, page edit permissions could be limited to only those that are trusted until you can upgrade although this will not address existing exploitation of this vulnerability. The issue is fixed in version 0.30.4.

Why it matters now

EPSS 0.01169 67th percentileScored 2026-11-07

Public exploit Yes 2 exploit referencesTagged by NVD

Fix Fixed BookStack (BookStackApp): 0.30.4

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
bookstackapp	BookStack	before 0.30.4	0.30.4	Patch available	CNA

BookStack Vendorbookstackapp Affected before 0.30.4 Fixed in 0.30.4 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:bookstackapp:bookstack::::::::	before 0.30.4	Vulnerable	bookstackapp

cpe:2.3:a:bookstackapp:bookstack:*:*:*:*:*:*:*:* Versions before 0.30.4 Vulnerable ·bookstackapp

Remediation

Fix · CNA BookStack (BookStackApp) Fixed in 0.30.4

Timeline

2026-10-02 Threatist record created from CVE-2020-26210
2026-10-03 Alias added: GHSA-vmfp-7cw6-345x

References

Exploit 2

Patch 1

https://github.com/BookStackApp/BookStack/commit/349162ea139556b2d25e09e155cec84e21cc9227

Advisory 1

https://github.com/BookStackApp/BookStack/releases/tag/v0.30.4

TI-2021-02995 Improper Access Control in bookstackapp/bookstack CVSS 3.1CRITICAL 9.8
TI-2023-04263 Server-Side Request Forgery (SSRF) in bookstackapp/bookstack CVSS 3.1LOW 2.4
TI-2020-04312 Remote Code Execution Through Image Uploads in BookStack CVSS 3.1HIGH 8.8
TI-2020-16032 Cross-Site Scripting in BookStack CVSS 3.1HIGH 8.7
TI-2023-05693 Book Stack v23.10.2 - LFR via Blind SSRF CVSS 3.1MEDIUM 6.5
TI-2021-02848 Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack CVSS 3.1MEDIUM 6.8

See all 20 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences