← Back

Pukiwiki

pukiwiki

4 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Pukiwiki
pukiwiki
Pukiwiki Plus!
pukiwiki_plus!

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Pukiwiki
1Pukiwiki
Jun 17, 2026
Aug 23, 2022
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Stored cross-site scripting vulnerability in PukiWiki versions 1.3.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors.
1Pukiwiki
1Pukiwiki
Jun 17, 2026
Aug 23, 2022
N/A· v4
7.2 HIGH· v3
N/A· v2
Path traversal vulnerability in PukiWiki versions 1.4.5 to 1.5.3 allows a remote authenticated attacker with an administrative privilege to execute a malicious script via unspecified vectors.
1Pukiwiki
1Pukiwiki
Jun 17, 2026
Aug 23, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Reflected cross-site scripting vulnerability in PukiWiki versions 1.5.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors.
1Pukiwiki
1Pukiwiki Plus!
Apr 29, 2026
Dec 22, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in plugin/comment.inc.php in PukiWiki Plus! 1.4.7plus-u2-i18n and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.