CVE-2026-40927 — Docmost: XSS in Comments with JavaScript URI
Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.0, when leaving a comment on a page, it is possible to include a JavaScript URI as the link. …
Published: 2026-04-21 · CVSS: 5.4 · CVSS 3.1
Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.0, when leaving a comment on a page, it is possible to include a JavaScript URI as the link. When a user clicks on the link the JavaScript executes. This vulnerability is fixed in 0.80.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7