Advisories · Technology

requarks wiki.

Every CVE that names requarks wiki among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-44224 CVE record

CVSS 8.6 High

Wiki.js: Privilege Escalation via Missing Group Validation in users.update
- requarks wiki
- Privilege escalation
Not analysed yet 12 May 2026
CVE-2024-45298 CVE record

CVSS 4.3 Medium

Disabled user can bypass lockout by requesting password reset in wiki.js
- requarks wiki
- CWE-670
Not analysed yet 18 Sept 2024
CVE-2022-1681 CVE record

CVSS 7.2 High

Authentication Bypass Using an Alternate Path or Channel in requarks/wiki
- requarks/wiki
- Authentication bypass
Not analysed yet 12 May 2022
CVE-2022-23654 CVE record

CVSS 8.1 High

Improper write access check in Requarks/wiki
- Requarks wiki
- Authentication bypass
Not analysed yet 22 Feb 2022
CVE-2021-25993 CVE record

CVSS 5.4 Medium

Requarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editor
- Requarks wiki
- Cross-site scripting (XSS)
Not analysed yet 29 Dec 2021
CVE-2021-43855 CVE record

CVSS 8.2 High

Stored XSS via SVG in Requarks/wiki
- Requarks wiki
- Cross-site scripting (XSS)
Not analysed yet 27 Dec 2021
CVE-2021-43856 CVE record

CVSS 8.2 High

Stored XSS in non-image uploads in Requarks/wiki
- Requarks wiki
- Cross-site scripting (XSS)
Not analysed yet 27 Dec 2021
CVE-2021-43842 CVE record

CVSS 5.4 Medium

Stored XSS via SVG file upload in Wiki.js
- Requarks wiki
- Cross-site scripting (XSS)
Not analysed yet 20 Dec 2021
CVE-2021-43800 CVE record

CVSS 7.5 High

Asset directory traversal with some storage modules on Windows
- Requarks wiki
- Path traversal
Not analysed yet 6 Dec 2021
CVE-2021-21383 CVE record

CVSS 7.6 High

XSS in Wiki.js
- Requarks wiki
- Cross-site scripting (XSS)
Not analysed yet 18 Mar 2021
CVE-2020-15236 CVE record

CVSS 8.6 High

Directory Traversal in Wiki.js
- Requarks wiki
- Path traversal
Not analysed yet 5 Oct 2020