RRequarks

Products

Exploited and recent CVEs

• CVE-2026-92776 High 8.1 Wiki.js through 2.5.314 Path Prefix Matching Authorization Bypass 0.4%
• CVE-2026-92775 Medium 6.5 Wiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetch 0.4%
• CVE-2026-92774 Medium 4.3 Wiki.js through 2.5.314 Authorization Bypass via GraphQL Tag Omission 0.4%
• CVE-2026-44224 High 8.6 Wiki.js: Privilege Escalation via Missing Group Validation in users.update 0.4%
• CVE-2024-45298 Medium 4.3 Disabled user can bypass lockout by requesting password reset in wiki.js 0.4%
• CVE-2024-34710 High 7.1 Wiki.js Stored XSS through Client Side Template Injection 0.4%
• CVE-2022-1681 High 7.2 Authentication Bypass Using an Alternate Path or Channel in requarks/wiki 2.0%
• CVE-2022-23654 High 8.1 Improper write access check in Requarks/wiki 0.7%
• CVE-2021-25993 Medium 5.4 Requarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editor 0.6%
• CVE-2021-43855 High 8.2 Stored XSS via SVG in Requarks/wiki 0.9%
• CVE-2021-43856 High 8.2 Stored XSS in non-image uploads in Requarks/wiki 0.9%
• CVE-2021-43842 Medium 5.4 Stored XSS via SVG file upload in Wiki.js 0.7%
• CVE-2021-43800 High 7.5 Asset directory traversal with some storage modules on Windows 1.8%
• CVE-2021-21383 High 7.6 XSS in Wiki.js 1.0%
• CVE-2020-15274 Medium 5.8 Stored XSS via search result in Wiki.js 0.8%
• CVE-2020-15236 High 8.6 Directory Traversal in Wiki.js 1.8%
• CVE-2020-11051 Medium 6.9 XSS in Wiki.js 0.6%