Read the docs

PukiWiki Development Team

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

PukiWiki Development Team records in CISA KEV

No PukiWiki Development Team vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pukiwiki 3 records LOW Pukiwiki Plus! 1 record LOW

Records

4 records

TI-2022-15380 CVE-2022-34486 · GHSA-w4fw-hp52-r4mg

Path traversal in PukiWiki

Priority LOW 34

Path traversal vulnerability in PukiWiki versions 1.4.5 to 1.5.3 allows a remote authenticated attacker with an administrative privilege to execute a malicious script via unspecified vectors.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01322 Published 2022-08-23 No fix listed CWE-22
TI-2022-16692 CVE-2022-36350 · GHSA-428v-vcmp-3q56

Cross-site scripting in PukiWiki

Priority LOW 28

Stored cross-site scripting vulnerability in PukiWiki versions 1.3.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00568 Published 2022-08-23 No fix listed CWE-79
TI-2022-10618 CVE-2022-27637 · GHSA-xrh6-4x56-6rp6

Cross-site scripting in PukiWiki

Priority LOW 28

Reflected cross-site scripting vulnerability in PukiWiki versions 1.5.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00588 Published 2022-08-23 No fix listed CWE-79
Open these records in search →