Docsifyjs Docsify
3 CVEs affecting Docsifyjs Docsify. Latest disclosed: 2021-04-02. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-23342 | High | 8.6 | 2021-02-19 | This affects the package docsify before 4.12.0. It is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the fol… |
CVE-2021-30074 | Medium | 6.1 | 2021-04-02 | docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the " character. |
CVE-2020-7680 | Medium | 6.1 | 2020-07-20 | docsify prior to 4.11.4 is susceptible to Cross-site Scripting (XSS). Docsify.js uses fragment identifiers (parameters after # sign) to load resources from ser… |