Stored XSS via Theming Configuration in Wiki.js - #8052

Open

bshakeel86 wants to merge 1 commit into

requarks:mainfrom

bshakeel86:fix/stored-xss-theming-injecthead-injectbody

Commits on Jul 27, 2026

fix: sanitize injectHead and injectBody to prevent site-wide stored XSS
Shakeel Bhat
committed
6cbe608