CVE-2026-40927

Published April 21st, 2026

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.0, when leaving a comment on a page, it is possible to include a JavaScript URI as the link. When a user clicks on the link the JavaScript executes. This vulnerability is fixed in 0.80.0.

docmost/docmost

Docmost is an open-source collaborative wiki and documentation software. It is an open-source alternative to Confluence and Notion.

GitHub

20.6K