Cross-Site Scripting Vulnerability in HTMLCreator by SplitBrain
CVE-2022-28919

6.1MEDIUM

Key Information:

Vendor: Dokuwiki
Status: Dokuwiki
Vendor: CVE Published:; 12 May 2022

What is CVE-2022-28919?

HTMLCreator, specifically the release_stable_2020-07-29 version from SplitBrain, has been found to contain a cross-site scripting (XSS) vulnerability in the _generateFilename function. This flaw allows attackers to inject malicious scripts into web pages viewed by users, potentially compromising sensitive information and enabling further attacks. It is essential for users of affected versions to apply necessary patches and updates promptly to safeguard their applications.