PukiWiki Development Team

Products

ProductCVEsExploitedLatest
PukiWiki3–Aug 23, 2022

Exploited and recent CVEs

  • CVE-2022-36350 Medium 6.1 Stored cross-site scripting vulnerability in PukiWiki versions 1.3.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors. 0.6%
  • CVE-2022-34486 Unrated Path traversal vulnerability in PukiWiki versions 1.4.5 to 1.5.3 allows a remote authenticated attacker with an administrative privilege to execute a malicious script via unspecified vectors. 1.3%
  • CVE-2022-27637 Unrated Reflected cross-site scripting vulnerability in PukiWiki versions 1.5.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors. 0.6%