CVE-2022-28919: Dokuwiki

Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days.

HTMLCreator release_stable_2020-07-29 was discovered to contain a cross-site scripting (XSS) vulnerability via the function _generateFilename.

Affected products

  • Dokuwiki Dokuwiki: version 2020-07-29 only
  • Fedoraproject Fedora: version 34 only; version 35 only; version 36 only

Published 2022-05-12. Last modified 2026-06-17.