Vulnerability CVE-2022-25978
Published: 2023-02-15

Description:
All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting (XSS) due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme.

 References:
https://github.com/usememos/memos/commit/b11d2130a084385eb65c3761a3c841ebe9f81ae8
https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMUSEMEMOSMEMOSSERVER-3319070
https://github.com/usememos/memos/issues/1026
Copyright 2026, cxsecurity.com

 

Back to Top