← Database

CVE-2022-25978

MEDIUM CVSS: 5.4 Published: 2023-02-15 Modified: 2026-06-17

Description

All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting (XSS) due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme.

Affected Platforms

Usememos Memos

Weakness Type

CWE-79, CWE-79, CWE-79

References