DO
Product
Dokuwiki
27
CVEs
0
On KEV
9.6
Max CVSS
1
New 30D
Severity mix
Critical 1High 3Medium 10Low 0
Watch
Add Dokuwiki to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-7965 | 6.5 | Oct 31 | DokuWiki 2016-06-26a and older uses $_SERVER[HTTP_HOST] instead of the baseurl setting as part of the password-reset URL Affected: through 2016-06-26a |
| CVE-2024-33103 | 6.1 | Apr 30 | An arbitrary file upload vulnerability in the Media Manager component of DokuWiki 2024-02-06a allows attackers to execute arbitrary code by uploading a crafted SVG file Affected: 2024-02-06a |
| CVE-2022-3123 | 6.1 | Sep 5 | Cross-site Scripting (XSS) - Reflected in GitHub repository splitbrain/dokuwiki prior to 2022-07-31a Affected: before 2022-07-31a |
| CVE-2022-28919 | 6.1 | May 12 | HTMLCreator release_stable_2020-07-29 was discovered to contain a cross-site scripting (XSS) vulnerability via the function _generateFilename Affected: 2020-07-29 |
| CVE-2017-12980 | 6.1 | Aug 21 | DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc/parser/xhtml.php Affected: through 2017-02-19c |
| CVE-2017-12979 | 6.1 | Aug 21 | DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/xhtml.php Affected: through 2017-02-19c |
| CVE-2017-12583 | 6.1 | Aug 6 | DokuWiki through 2017-02-19b has XSS in the at parameter (aka the DATE_AT variable) to doku.php Affected: through 2017-02-19b |
| CVE-2023-34408 | 5.4 | Jun 5 | DokuWiki before 2023-04-04a allows XSS via RSS titles Affected: before 2023-04-04a |
| CVE-2019-25338 | 5.3 | Feb 12 | Dokuwiki 2018-04-22b - Username Enumeration Affected: 2018-04-22b "Greebo" |
| CVE-2026-26477 | 4.3 | Apr 3 | An issue in Dokuwiki v.2025-05-14b "Librarian" [56.2] allows a remote attacker to cause a denial of service via the media_upload_xhr() function in the media.php file Affected: 2025-05-14b |
Showing 10