CVE-2024-42758
Last modified
CVE-2024-42758 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. A Cross-site Scripting (XSS) vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki (Open Source Wiki Engine). A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is then stored in .txt file (due to nature of how Dokuwiki is designed), which presents stored XSS.. EPSS estimates a 0.70% chance of exploitation in the next 30 days.
Description
A Cross-site Scripting (XSS) vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enabled in Dokuwiki (Open Source Wiki Engine). A malicious attacker can input XSS payloads for example when creating or editing existing page, to trigger the XSS on Dokuwiki, which is then stored in .txt file (due to nature of how Dokuwiki is designed), which presents stored XSS.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-42758?
How severe is CVE-2024-42758?
How do I fix CVE-2024-42758?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-42747In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bi…8.8
- CVE-2024-42748In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bi…8.8
- CVE-2024-42749Cross Site Scripting vulnerability in Alto CMS v.1.1.13 allo…6.1
- CVE-2024-4275The Essential Addons for Elementor – Best Elementor Template…5.4
- CVE-2024-42756An issue in Netgear DGN1000WW v.1.1.00.45 allows a remote at…8.8
- CVE-2024-42757Command injection vulnerability in Asus RT-N15U 3.0.0.4.376_…9.8
- CVE-2024-42759An issue in Ellevo v.6.2.0.38160 allows a remote attacker to…6.3
- CVE-2024-4276Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2024-42760SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a…7.5
- CVE-2024-42761A Stored Cross Site Scripting (XSS) vulnerability was found …6.1
- CVE-2024-42762A Stored Cross Site Scripting (XSS) vulnerability was found …5.4
- CVE-2024-42763A Reflected Cross Site Scripting (XSS) vulnerability was fou…5.4
Are you affected by CVE-2024-42758?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST