Vulnerabilities

TI-2024-32056 CVE-2024-47781

Cross-site Scripting (XSS) in Special:RequestWikiQueue when displaying sitename in CreateWiki

LOW 24

CreateWiki is an extension used at Miraheze for requesting & creating wikis.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00327 Published 2024-10-07 No fix listed CWE-79

TI-2024-19666 CVE-2024-29898

LOW 30

CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00691 Published 2024-03-28 No fix listed CWE-200

TI-2024-19652 CVE-2024-29883

LOW 23

CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00603 Published 2024-03-26 Fixed in 0c7c4f9 CWE-200

TI-2022-08626 CVE-2022-24813

LOW 32

CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01008 Published 2022-04-04 No fix listed CWE-287