miraheze ManageWiki

• CVE-2025-43861 Medium 4.4 ManageWiki Vulnerable to Self-XSS in review dialog via unsanitized field reflection 0.3%
• CVE-2025-32964 Medium 4.6 ManageWiki vulnerable to permission bypass when disabling extensions requiring certain permissions in Special:ManageWiki/extensions 0.2%
• CVE-2025-32956 High 8.0 ManageWiki has SQL injection vulnerability in NamespaceMigrationJob 0.7%
• CVE-2024-25109 Medium 6.5 Cross-Site Scripting in the extensions, settings, permissions and namespaces subpages of ManageWiki 0.4%
• CVE-2021-29483 Critical 9.4 wikiconfig API leaked private config variables set through ManageWiki 1.2%