Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: PukiWiki Development Team Component: Pukiwiki Clear all filters
TI-2022-16692 CVE-2022-36350 · GHSA-428v-vcmp-3q56

Cross-site scripting in PukiWiki

Priority LOW 28

Stored cross-site scripting vulnerability in PukiWiki versions 1.3.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00568 Published 2022-08-23 No fix listed CWE-79
TI-2022-15380 CVE-2022-34486 · GHSA-w4fw-hp52-r4mg

Path traversal in PukiWiki

Priority LOW 34

Path traversal vulnerability in PukiWiki versions 1.4.5 to 1.5.3 allows a remote authenticated attacker with an administrative privilege to execute a malicious script via unspecified vectors.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01322 Published 2022-08-23 No fix listed CWE-22
TI-2022-10618 CVE-2022-27637 · GHSA-xrh6-4x56-6rp6

Cross-site scripting in PukiWiki

Priority LOW 28

Reflected cross-site scripting vulnerability in PukiWiki versions 1.5.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00588 Published 2022-08-23 No fix listed CWE-79