PandaWiki vulnerabilities

CVEs whose affected-version data names the PandaWiki package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120428Medium· 6.1PoC

6d ago

PandaWiki 3.65.0 through 3.87.5 Stored XSS via /static-file/ PDF Query-String Bypass

PandaWiki 3.65.0 through 3.87.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to upload HTML files with image extensions via /share/v1/common/file/upload. Attackers can lure administrators to …

▾ TwilightChaitin · PandaWikiEPSS 0.36%via CVEORG