What’s Vulnerable › Products

Requarks wiki vulnerabilities

19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Requarks wiki version is affected

Latest Requarks wiki vulnerabilities

• CVE-2026-92776 — Wiki.js through 2.5.314 Path Prefix Matching Authorization Bypass (CVSS 8.1)
• CVE-2026-92775 — Wiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetch (CVSS 6.5)
• CVE-2026-92774 — Wiki.js through 2.5.314 Authorization Bypass via GraphQL Tag Omission (CVSS 4.3)
• CVE-2026-44224 — Wiki.js: Privilege Escalation via Missing Group Validation in users.update (CVSS 8.8)
• CVE-2025-56643 — (CVSS 9.1)
• CVE-2024-45298 — Disabled user can bypass lockout by requesting password reset in wiki.js (CVSS 4.3)
• CVE-2024-34710 — Wiki.js Stored XSS through Client Side Template Injection (CVSS 7.1)
• CVE-2022-1681 — Authentication Bypass Using an Alternate Path or Channel in requarks/wiki (CVSS 7.2)
• CVE-2022-23654 — Improper write access check in Requarks/wiki (CVSS 6.5)
• CVE-2021-25993 — Requarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editor (CVSS 5.4)
• CVE-2021-43856 — Stored XSS in non-image uploads in Requarks/wiki (CVSS 5.4)
• CVE-2021-43855 — Stored XSS via SVG in Requarks/wiki (CVSS 5.4)
• CVE-2021-43842 — Stored XSS via SVG file upload in Wiki.js (CVSS 3.5)
• CVE-2021-43800 — Asset directory traversal with some storage modules on Windows (CVSS 7.5)
• CVE-2021-21383 — XSS in Wiki.js (CVSS 5.4)
• CVE-2020-15274 — Stored XSS via search result in Wiki.js (CVSS 5.4)
• CVE-2020-15236 — Directory Traversal in Wiki.js (CVSS 7.5)
• CVE-2020-4052 — Stored XSS through template injection in Wiki.js (CVSS 6.1)
• CVE-2020-11051 — XSS in Wiki.js (CVSS 4.8)