CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-25993

In Requarks wiki.js, versions 2.0.0-beta.147 to 2.5.255 are affected by Stored XSS vulnerability, where a low privileged (editor) user can upload a SVG file that contains malicious JavaScript while uploading assets in the page. That will send the JWT tokens to the attacker’s server and will lead to account takeover when accessed by the victim.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 43.1%

CVSS Severity

CVSS v3 Score 5.4

CVSS v2 Score 3.5

References

Products affected by CVE-2021-25993

Requarks » Wiki.js » Version: 2.0.0

cpe:2.3:a:requarks:wiki.js:2.0.0
Requarks » Wiki.js » Version: 2.0.1

cpe:2.3:a:requarks:wiki.js:2.0.1
Requarks » Wiki.js » Version: 2.0.12

cpe:2.3:a:requarks:wiki.js:2.0.12
Requarks » Wiki.js » Version: 2.1.113

cpe:2.3:a:requarks:wiki.js:2.1.113
Requarks » Wiki.js » Version: 2.2.50

cpe:2.3:a:requarks:wiki.js:2.2.50
Requarks » Wiki.js » Version: 2.2.51

cpe:2.3:a:requarks:wiki.js:2.2.51
Requarks » Wiki.js » Version: 2.3.71

cpe:2.3:a:requarks:wiki.js:2.3.71
Requarks » Wiki.js » Version: 2.3.72

cpe:2.3:a:requarks:wiki.js:2.3.72
Requarks » Wiki.js » Version: 2.3.77

cpe:2.3:a:requarks:wiki.js:2.3.77
Requarks » Wiki.js » Version: 2.3.81

cpe:2.3:a:requarks:wiki.js:2.3.81
Requarks » Wiki.js » Version: 2.4.105

cpe:2.3:a:requarks:wiki.js:2.4.105
Requarks » Wiki.js » Version: 2.4.107

cpe:2.3:a:requarks:wiki.js:2.4.107
Requarks » Wiki.js » Version: 2.4.75

cpe:2.3:a:requarks:wiki.js:2.4.75
Requarks » Wiki.js » Version: 2.5.105

cpe:2.3:a:requarks:wiki.js:2.5.105
Requarks » Wiki.js » Version: 2.5.117

cpe:2.3:a:requarks:wiki.js:2.5.117
Requarks » Wiki.js » Version: 2.5.121

cpe:2.3:a:requarks:wiki.js:2.5.121
Requarks » Wiki.js » Version: 2.5.126

cpe:2.3:a:requarks:wiki.js:2.5.126
Requarks » Wiki.js » Version: 2.5.132

cpe:2.3:a:requarks:wiki.js:2.5.132
Requarks » Wiki.js » Version: 2.5.136

cpe:2.3:a:requarks:wiki.js:2.5.136
Requarks » Wiki.js » Version: 2.5.144

cpe:2.3:a:requarks:wiki.js:2.5.144
Requarks » Wiki.js » Version: 2.5.151

cpe:2.3:a:requarks:wiki.js:2.5.151
Requarks » Wiki.js » Version: 2.5.159

cpe:2.3:a:requarks:wiki.js:2.5.159
Requarks » Wiki.js » Version: 2.5.162

cpe:2.3:a:requarks:wiki.js:2.5.162
Requarks » Wiki.js » Version: 2.5.170

cpe:2.3:a:requarks:wiki.js:2.5.170
Requarks » Wiki.js » Version: 2.5.191

cpe:2.3:a:requarks:wiki.js:2.5.191
Requarks » Wiki.js » Version: 2.5.197

cpe:2.3:a:requarks:wiki.js:2.5.197
Requarks » Wiki.js » Version: 2.5.201

cpe:2.3:a:requarks:wiki.js:2.5.201
Requarks » Wiki.js » Version: 2.5.214

cpe:2.3:a:requarks:wiki.js:2.5.214
Requarks » Wiki.js » Version: 2.5.219

cpe:2.3:a:requarks:wiki.js:2.5.219
Requarks » Wiki.js » Version: 2.5.254

cpe:2.3:a:requarks:wiki.js:2.5.254
Requarks » Wiki.js » Version: 2.5.255

cpe:2.3:a:requarks:wiki.js:2.5.255
Requarks » Wiki.js » Version: 2.5.80

cpe:2.3:a:requarks:wiki.js:2.5.80

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-25993

Products

Pricing

Contact Us