Cross Site Scripting Vulnerability in DokuWiki by DokuWiki
CVE-2025-61224

6.5MEDIUM

Key Information:

Vendor

DokuWiki

Status
DokuWiki
Vendor
CVE Published:
6 October 2025

What is CVE-2025-61224?

A Cross Site Scripting (XSS) vulnerability exists in DokuWiki version 2025-05-14a that allows attackers to inject arbitrary scripts through the q parameter. This flaw permits potential remote code execution, making it crucial for users to apply patches and harden their installations against such threats. For more details, refer to issue discussions on GitHub.

References

https://github.com/dokuwiki/dokuwiki/issues/4512
https://github.com/MarioTesoro/vulnerability-research/tre...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.