<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: pukiwiki</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-36350: Stored cross-site scripting vulnerability in PukiWiki versions 1.3.1 to 1.5.3 allows a remote attacker to inje</title><link>https://patchthecve.com/cve/CVE-2022-36350.html</link><guid>https://patchthecve.com/cve/CVE-2022-36350.html</guid><pubDate>Wed, 17 Jun 2026 04:53:18 +0000</pubDate><description>MEDIUM 5.4: Stored cross-site scripting vulnerability in PukiWiki versions 1.3.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors.</description></item><item><title>CVE-2022-34486: Path traversal vulnerability in PukiWiki versions 1.4.5 to 1.5.3 allows a remote authenticated attacker with a</title><link>https://patchthecve.com/cve/CVE-2022-34486.html</link><guid>https://patchthecve.com/cve/CVE-2022-34486.html</guid><pubDate>Wed, 17 Jun 2026 04:50:27 +0000</pubDate><description>HIGH 7.2: Path traversal vulnerability in PukiWiki versions 1.4.5 to 1.5.3 allows a remote authenticated attacker with an administrative privilege to execute a malicious script via unspecified vectors.</description></item><item><title>CVE-2022-27637: Reflected cross-site scripting vulnerability in PukiWiki versions 1.5.1 to 1.5.3 allows a remote attacker to i</title><link>https://patchthecve.com/cve/CVE-2022-27637.html</link><guid>https://patchthecve.com/cve/CVE-2022-27637.html</guid><pubDate>Wed, 17 Jun 2026 04:37:23 +0000</pubDate><description>MEDIUM 6.1: Reflected cross-site scripting vulnerability in PukiWiki versions 1.5.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors.</description></item></channel></rss>