Back to Database
Status published
Medium
CVE-2017-20239
MDwiki Cross-Site Scripting via Location Hash Parameter
Vulnerability Description
MDwiki contains a cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by injecting malicious code through the location hash parameter. Attackers can craft URLs with JavaScript payloads in the hash fragment that are parsed and rendered without sanitization, causing the injected scripts to execute in the victim's browser context.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-20239
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
Dynalon
View all reports →Affected Software
MDwiki
Vulnerable Versions:
0.6.2
Timeline
Official Publish:
April 12th, 2026
Last Modified:
May 24th, 2026
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N