CVE-2022-24813: Miraheze Createwiki

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. Without the patch for this issue, anonymous comments can be made using Special:RequestWikiQueue when sent directly via POST. A patch for this issue is available in the `master` branch of CreateWiki's GitHub repository.

Affected products

• Miraheze Createwiki: before 2022-04-02 (fixed in 2022-04-02)

Published 2022-04-04. Last modified 2026-06-17.