Vulnerabilities > Miraheze

DATE CVE VULNERABILITY TITLE RISK
2024-10-07 CVE-2024-47781 Cross-site Scripting vulnerability in Miraheze Createwiki 20220402
CreateWiki is an extension used at Miraheze for requesting & creating wikis.
network
low complexity
miraheze CWE-79
6.1
2024-10-07 CVE-2024-47782 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Miraheze Wikidiscover 20240208
WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis.
network
low complexity
miraheze CWE-80
5.4
2024-02-09 CVE-2024-25109 Cross-site Scripting vulnerability in Miraheze Managewiki 20210428
ManageWiki is a MediaWiki extension allowing users to manage wikis.
network
low complexity
miraheze CWE-79
5.4
2024-02-08 CVE-2024-25107 Cross-site Scripting vulnerability in Miraheze Wikidiscover
WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis.
network
low complexity
miraheze CWE-79
6.1
2022-04-04 CVE-2022-24813 Improper Authentication vulnerability in Miraheze Createwiki
CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis.
network
low complexity
miraheze CWE-287
5.3
2021-09-01 CVE-2021-39186 Improper Input Validation vulnerability in Miraheze Globalnewfiles
GlobalNewFiles is a MediaWiki extension maintained by Miraheze.
network
low complexity
miraheze CWE-20
6.1
2021-07-20 CVE-2021-32774 Cross-Site Request Forgery (CSRF) vulnerability in Miraheze Datadump
DataDump is a MediaWiki extension that provides dumps of wikis.
network
low complexity
miraheze CWE-352
5.4
2021-06-28 CVE-2021-32722 Resource Exhaustion vulnerability in Miraheze Globalnewfiles
GlobalNewFiles is a mediawiki extension.
network
low complexity
miraheze CWE-400
6.5
2021-04-28 CVE-2021-29483 Information Exposure vulnerability in Miraheze Managewiki
ManageWiki is an extension to the MediaWiki project.
network
low complexity
miraheze CWE-200
7.5