CVE catalog

CVE-2025-61224

dokuwiki: CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'[56.1] allows a remote attacker to execute arbitrary code via the q parameter

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	dokuwiki	sid	`2026-07-14.c+dfsg-3`	fixed
Debian	dokuwiki	forky	`2026-07-14.c+dfsg-3`	fixed
Debian	dokuwiki	trixie	`2024-02-06b+dfsg-9`	vulnerable
Debian	dokuwiki	bookworm	`0.0.20220731.a-2`	vulnerable

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	dokuwiki	source	sid	`2025-05-14.b+dfsg-1`	not yet assigned	Not reported	[1117531]
Debian	dokuwiki	source	forky	`2025-05-14.b+dfsg-1`	not yet assigned	Not reported	[1117531]
Debian	dokuwiki	source	trixie	`(unfixed)`	not yet assigned	Not reported	[1117531]
Debian	dokuwiki	source	bookworm	`(unfixed)`	not yet assigned	Not reported	[1117531]

[trixie] dokuwiki: Minor issue [bookworm] dokuwiki: Minor issue

Observed: Oct 24, 2026, 5:24:37 PM UTC