Sofawiki Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Sofawiki Project records in CISA KEV

No Sofawiki Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Sofawiki · all components

TI-2023-13975 CVE-2023-29721 · GHSA-hwrm-fmfj-vh26

HIGH 82

SofaWiki <= 3.8.9 has a file upload vulnerability that leads to command execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01138 Published 2023-05-24 No fix listed CWE-434

TI-2023-13974 CVE-2023-29720 · GHSA-5wwj-xp2f-c6cr

MEDIUM 60

SofaWiki <=3.8.9 is vulnerable to Cross Site Scripting (XSS) via index.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00387 Published 2023-05-18 No fix listed CWE-79