CR
Product
CreateWiki
6
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 6Low 0
Watch
Add CreateWiki to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-29898 | 6.5 | Mar 28 | Oversight in fix for GHSA-4rcf-3cj2-46mq may have exposed suppressed wiki requests on private wikis Affected: 23415c17ffb4832667c06abcf1eadadefd4c8937 |
| CVE-2024-47781 | 6.1 | Oct 7 | Cross-site Scripting (XSS) in Special:RequestWikiQueue when displaying sitename in CreateWiki Affected: commits before 693a220f399ee7eb4d00e77c3c667e864b1bd306 |
| CVE-2024-34701 | 5.9 | May 13 | CreateWiki vulnerable to impersonation of wiki requester Affected: < 02e0f298f8d35155c39aa74193cb7b867432c5b8 |
| CVE-2022-24813 | 5.3 | Apr 4 | CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis Affected: before 2022-04-02 |
| CVE-2024-29897 | 4.9 | Mar 28 | CreateWiki Leak of suppressed wiki requests outside of `CreateWikiGlobalWiki` Affected: < 23415c17ffb4832667c06abcf1eadadefd4c8937 |
| CVE-2024-29883 | 4.9 | Mar 26 | CreateWiki's wiki request suppression ignores the suppression settings set by the suppressor Affected: < 0c7c4f93834349be8f5c2a678e9a85b4b1aa7bab |
Showing 6
