CVE-2012-0283: Andreas Gohr Dokuwiki

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-01-25b allows remote attackers to inject arbitrary web script or HTML via the ns parameter in a medialist action to lib/exe/ajax.php.

Affected products

• Andreas Gohr Dokuwiki: up to and including 2012-01-25a; version 2005-07-01 only; version 2005-09-19 only; version 2005-09-22 only; version 2006-03-05 only; version 2006-03-09 only; …

Published 2012-07-13. Last modified 2026-06-16.