Vulnerability Details CVE-2026-40927
Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.0, when leaving a comment on a page, it is possible to include a JavaScript URI as the link. When a user clicks on the link the JavaScript executes. This vulnerability is fixed in 0.80.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.6%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2026-40927
-
cpe:2.3:a:docmost:docmost:0.10.0
-
cpe:2.3:a:docmost:docmost:0.10.1
-
cpe:2.3:a:docmost:docmost:0.10.2
-
cpe:2.3:a:docmost:docmost:0.2.0
-
cpe:2.3:a:docmost:docmost:0.2.1
-
cpe:2.3:a:docmost:docmost:0.2.10
-
cpe:2.3:a:docmost:docmost:0.2.2
-
cpe:2.3:a:docmost:docmost:0.2.3
-
cpe:2.3:a:docmost:docmost:0.2.4
-
cpe:2.3:a:docmost:docmost:0.2.5
-
cpe:2.3:a:docmost:docmost:0.2.7
-
cpe:2.3:a:docmost:docmost:0.2.8
-
cpe:2.3:a:docmost:docmost:0.2.9
-
cpe:2.3:a:docmost:docmost:0.20.0
-
cpe:2.3:a:docmost:docmost:0.20.1
-
cpe:2.3:a:docmost:docmost:0.20.2
-
cpe:2.3:a:docmost:docmost:0.20.3
-
cpe:2.3:a:docmost:docmost:0.20.4
-
cpe:2.3:a:docmost:docmost:0.21.0
-
cpe:2.3:a:docmost:docmost:0.22.0
-
cpe:2.3:a:docmost:docmost:0.22.1
-
cpe:2.3:a:docmost:docmost:0.22.2
-
cpe:2.3:a:docmost:docmost:0.23.0
-
cpe:2.3:a:docmost:docmost:0.23.1
-
cpe:2.3:a:docmost:docmost:0.23.2
-
cpe:2.3:a:docmost:docmost:0.24.0
-
cpe:2.3:a:docmost:docmost:0.24.1
-
cpe:2.3:a:docmost:docmost:0.25.0
-
cpe:2.3:a:docmost:docmost:0.25.1
-
cpe:2.3:a:docmost:docmost:0.25.2
-
cpe:2.3:a:docmost:docmost:0.25.3
-
cpe:2.3:a:docmost:docmost:0.3.0
-
cpe:2.3:a:docmost:docmost:0.3.1
-
cpe:2.3:a:docmost:docmost:0.4.0
-
cpe:2.3:a:docmost:docmost:0.4.1
-
cpe:2.3:a:docmost:docmost:0.5.0
-
cpe:2.3:a:docmost:docmost:0.6.0
-
cpe:2.3:a:docmost:docmost:0.6.1
-
cpe:2.3:a:docmost:docmost:0.6.2
-
cpe:2.3:a:docmost:docmost:0.7.0
-
cpe:2.3:a:docmost:docmost:0.70.0
-
cpe:2.3:a:docmost:docmost:0.70.1
-
cpe:2.3:a:docmost:docmost:0.70.2
-
cpe:2.3:a:docmost:docmost:0.70.3
-
cpe:2.3:a:docmost:docmost:0.71.0
-
cpe:2.3:a:docmost:docmost:0.71.1
-
cpe:2.3:a:docmost:docmost:0.8.0
-
cpe:2.3:a:docmost:docmost:0.8.1
-
cpe:2.3:a:docmost:docmost:0.8.2
-
cpe:2.3:a:docmost:docmost:0.8.3
-
cpe:2.3:a:docmost:docmost:0.8.4
-
cpe:2.3:a:docmost:docmost:0.9.0