CyberRota Analysis
AI-GeneratedThe vulnerability affects LeafWiki versions prior to 0.10.2, where page titles returned by the search API can be rendered as raw HTML, allowing users with editor or administrator permissions to inject malicious HTML/JavaScript payloads. This could lead to cross-site scripting (XSS) attacks, impacting both unauthenticated visitors in public-access configurations and authenticated users in private deployments. Organizations using LeafWiki, particularly those with public access enabled or multiple user roles, should prioritize upgrading to version 0.10.2 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
LeafWiki is a self-hosted wiki. Prior to version 0.10.2, page titles returned by the search API could be rendered as raw HTML in the frontend. A user with editor or administrator permissions could create or modify a page title containing an HTML/JavaScript payload. When another user searched for a matching term, the payload could execute in the victim’s browser. The impact depends on deployment configuration. With `--public-access` enabled, unauthenticated visitors could be affected. In authenticated-only deployments, the issue could be used for cross-user XSS against logged-in users who can access search results. The issue has been fixed in version 0.10.2 by ensuring that author-controlled page titles in search results are not interpreted as raw HTML by the browser while preserving search result highlighting.