VendorsMirahezemanagewikiall versions
Vulnerabilities

Miraheze ManageWiki

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2021-29483
wikiconfig API leaked private config variables set through ManageWiki
Published 2021-04-28 · Modified
9.4EPSS 0.012
CVE-2025-32956
ManageWiki has SQL injection vulnerability in NamespaceMigrationJob
Published 2025-04-21 · Analyzed
8.0EPSS 0.007
CVE-2024-25109
Cross-Site Scripting in the extensions, settings, permissions and namespaces subpages of ManageWiki
Published 2024-02-09 · Modified
6.5EPSS 0.004
CVE-2025-43861
ManageWiki Vulnerable to Self-XSS in review dialog via unsanitized field reflection
Published 2025-04-24 · Analyzed
5.4EPSS 0.003
CVE-2025-32964
ManageWiki vulnerable to permission bypass when disabling extensions requiring certain permissions in Special:ManageWiki/extensions
Published 2025-04-22 · Analyzed
4.6EPSS 0.002