CVE-2022-25978
All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting (XSS) due to insufficient checks on external resources, which allows maliciou…
Published: 2023-02-15 · CVSS: 5.4 · CVSS 3.1
All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting (XSS) due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7