wiki vulnerabilities

2 known vulnerabilities in wiki from Requarks. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  wiki: Improper Privilege Management

  CVE-2026-44224May 12, 2026Requarks

  Wiki.js is an open source wiki app built on Node.js. Prior to 2.5.313, the users.update GraphQL mutation accepts an arbitrary groups array and applies it directly to the database with no validation of the group IDs supplied. The resolver passes the caller's ar

• 7.1 High severity

  wiki: Improper Neutralization of Special Elements Used in a Template Engine

  CVE-2024-34710May 20, 2024Requarks

  Wiki.js is al wiki app built on Node.js. Client side template injection was discovered, that could allow an attacker to inject malicious JavaScript into the content section of pages that would execute once a victim loads the page that contains the payload. Thi