CVE-2022-36080: Wikmd Project Wikmd

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, an attacker could capture user's session cookies or execute malicious Javascript when a victim edits a markdown file. Version 1.7.1 fixes this issue.

Affected products

• Wikmd Project Wikmd: before 1.7.1 (fixed in 1.7.1)

Published 2022-09-07. Last modified 2026-06-17.