CVE-2022-34486: Pukiwiki

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

Path traversal vulnerability in PukiWiki versions 1.4.5 to 1.5.3 allows a remote authenticated attacker with an administrative privilege to execute a malicious script via unspecified vectors.

Affected products

• Pukiwiki Pukiwiki: from 1.4.5, before 1.5.4 (fixed in 1.5.4)

Published 2022-08-23. Last modified 2026-06-17.