What’s Vulnerable › Products

miraheze CreateWiki vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your miraheze CreateWiki version is affected

Latest miraheze CreateWiki vulnerabilities

• CVE-2024-47781 — Cross-site Scripting (XSS) in Special:RequestWikiQueue when displaying sitename in CreateWiki (CVSS 6.1)
• CVE-2024-34701 — CreateWiki vulnerable to impersonation of wiki requester (CVSS 5.9)
• CVE-2024-29898 — Oversight in fix for GHSA-4rcf-3cj2-46mq may have exposed suppressed wiki requests on private wikis (CVSS 6.5)
• CVE-2024-29897 — CreateWiki Leak of suppressed wiki requests outside of `CreateWikiGlobalWiki` (CVSS 4.9)
• CVE-2024-29883 — CreateWiki's wiki request suppression ignores the suppression settings set by the suppressor (CVSS 4.9)
• CVE-2022-24813 — Authentication Bypass Using an Alternate Path or Channel in CreateWiki (CVSS 5.3)