All 3 CVE vulnerabilities found in leafwiki, with AI-generated Chinese analysis, references, and POCs.
Vendor: perber
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-53529 | LeafWiki vulnerable to stored XSS via search-result title (highlight() returns raw title into dangerouslySetInnerHTML) CWE-79 | 4.8 | Medium | 2026-08-21 |
| CVE-2026-53528 | FileWiki has path traversal in RenameAsset via unsanitized oldFilename parameter CWE-23 | 8.8 | High | 2026-08-21 |
| CVE-2026-53527 | LeafWiki Vulnerable to Privilege Escalation via User Self-Service Update CWE-269 | 8.8 | High | 2026-08-21 |
All 3 known CVE vulnerabilities affecting leafwiki with full Chinese analysis, references, and POCs where available.