What’s Vulnerable › Products

miraheze ManageWiki vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your miraheze ManageWiki version is affected

Latest miraheze ManageWiki vulnerabilities

• CVE-2025-43861 — ManageWiki Vulnerable to Self-XSS in review dialog via unsanitized field reflection (CVSS 5.4)
• CVE-2025-32964 — ManageWiki vulnerable to permission bypass when disabling extensions requiring certain permissions in Special:ManageWiki/extensions (CVSS 4.6)
• CVE-2025-32956 — ManageWiki has SQL injection vulnerability in NamespaceMigrationJob (CVSS 8.0)
• CVE-2024-25109 — Cross-Site Scripting in the extensions, settings, permissions and namespaces subpages of ManageWiki (CVSS 5.4)
• CVE-2021-29483 — wikiconfig API leaked private config variables set through ManageWiki (CVSS 7.5)