{
  "affected": [
    {
      "affectedData": [
        {
          "product": "leafwiki",
          "vendor": "perber",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.10.2"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "LeafWiki is a self-hosted wiki. Prior to version 0.10.2, page titles returned by the search API could be rendered as raw HTML in the frontend. A user with editor or administrator permissions could create or modify a page title containing an HTML/JavaScript payload. When another user searched for a matching term, the payload could execute in the victim\u2019s browser. The impact depends on deployment configuration. With `--public-access` enabled, unauthenticated visitors could be affected. In authenticated-only deployments, the issue could be used for cross-user XSS against logged-in users who can access search results. The issue has been fixed in version 0.10.2 by ensuring that author-controlled page titles in search results are not interpreted as raw HTML by the browser while preserving search result highlighting."
    },
    {
      "lang": "es",
      "value": "LeafWiki es una wiki autoalojada. Antes de la versi\u00f3n 0.10.2, los t\u00edtulos de p\u00e1gina devueltos por la API de b\u00fasqueda pod\u00edan renderizarse como HTML sin procesar en el frontend. Un usuario con permisos de editor o administrador pod\u00eda crear o modificar un t\u00edtulo de p\u00e1gina que contuviera una carga \u00fatil de HTML/JavaScript. Cuando otro usuario buscaba un t\u00e9rmino coincidente, la carga \u00fatil pod\u00eda ejecutarse en el navegador de la v\u00edctima. El impacto depende de la configuraci\u00f3n de despliegue. Con \u0027--public-access\u0027 habilitado, los visitantes no autenticados pod\u00edan verse afectados. En despliegues solo autenticados, el problema pod\u00eda usarse para XSS entre usuarios contra usuarios conectados que pueden acceder a los resultados de b\u00fasqueda. El problema se ha solucionado en la versi\u00f3n 0.10.2 asegurando que los t\u00edtulos de p\u00e1gina controlados por el autor en los resultados de b\u00fasqueda no sean interpretados como HTML sin procesar por el navegador mientras se conserva el resaltado de los resultados de b\u00fasqueda."
    }
  ],
  "id": "CVE-2026-53529",
  "lastModified": "2026-10-12T16:10:00.220",
  "metrics": {
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 4.8,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "LOW",
          "subIntegrityImpact": "LOW",
          "userInteraction": "ACTIVE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-53529",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-08-21T21:41:16.312734Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-08-21T22:16:39.430",
  "references": [
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/perber/leafwiki/security/advisories/GHSA-j344-qxqm-wg64"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Primary"
    }
  ]
}