Sofawiki (Sofawiki Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-05-24. Vendor: Sofawiki Project.

CVEs of Sofawiki

• CVE-2023-29721 - CVSS 9.8 (critical), 2023-05-24: SofaWiki <= 3.8.9 has a file upload vulnerability that leads to command execution.
• CVE-2023-29720 - CVSS 6.1 (medium), 2023-05-18: SofaWiki <=3.8.9 is vulnerable to Cross Site Scripting (XSS) via index.php.