Vulnerability index

Browse CVEs

249 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Cargo MEDIUM 6.1
CVE-2026-39839

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allow…

Fix: 3.8.7+
Fix from $1,600 2026-04-07
Cargo MEDIUM 6.1
CVE-2026-39840

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation Mediawiki - Cargo Extensio…

Fix: 3.8.7+
Fix from $1,600 2026-04-07
Cargo MEDIUM 5.4
CVE-2026-39837

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in WikiWorks Mediawiki - Cargo Extension allows Stored XS…

Fix: 3.8.7+
Fix from $1,600 2026-04-07
Mediawiki CRITICAL 9.8
CVE-2025-67484

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiFormatXml.Php. This issue affec…

Fix: 1.39.16 / 1.43.6+
Fix from $2,300 2026-02-03
Mediawiki MEDIUM 6.5
CVE-2025-67480

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryRevisionsBase.Php. This is…

Fix: 1.39.16 / 1.43.6+
Fix from $1,600 2026-02-03
Mediawiki MEDIUM 6.1
CVE-2025-67481

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vul…

Fix: 1.39.16 / 1.43.6+
Fix from $1,600 2026-02-03
Mediawiki MEDIUM 6.1
CVE-2025-67483

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vul…

Fix: 1.43.6 / 1.44.3+
Fix from $1,600 2026-02-03
Checkuser HIGH 8.8
CVE-2025-67478

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files includes/Mail/UserMailer.Php. This issue affect…

Fix: 1.39.14 / 1.43.4+
Fix from $1,950 2026-02-03
Visual Editor MEDIUM 6.1
CVE-2025-61656

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This …

Fix: 1.39.14 / 1.43.4+
Fix from $1,600 2026-02-03
Mediawiki MEDIUM 6.1
CVE-2025-67475

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vul…

Fix: 1.39.16 / 1.43.6+
Fix from $1,600 2026-02-03
Mediawiki MEDIUM 6.1
CVE-2025-67477

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vul…

Fix: 1.44.3+
Fix from $1,600 2026-02-03
Checkuser MEDIUM 6.1
CVE-2025-61651

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vul…

Fix: 1.44.1+
Fix from $1,600 2026-02-03
Visual Editor MEDIUM 6.1
CVE-2025-61655

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This …

Fix: 1.39.14 / 1.43.4+
Fix from $1,600 2026-02-03
Mediawiki MEDIUM 6.1
CVE-2025-61645

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vul…

Fix: 1.44.1+
Fix from $1,600 2026-02-03
Checkuser MEDIUM 6.1
CVE-2025-61648

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vul…

Fix: 1.44.1+
Fix from $1,600 2026-02-03
Mediawiki MEDIUM 5.4
CVE-2025-61646

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/RecentChanges/EnhancedChangesList.Php. …

Fix: 1.39.14 / 1.43.4+
Fix from $1,600 2026-02-03
Mediawiki MEDIUM 6.1
CVE-2025-11261

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vul…

Fix: 1.39.15 / 1.43.5+
Fix from $1,600 2026-02-03
Mediawiki MEDIUM 6.1
CVE-2025-61641

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiQueryAllPages.Php. This issue a…

Fix: 1.39.14 / 1.43.4+
Fix from $1,600 2026-02-03
Mediawiki MEDIUM 6.1
CVE-2025-61642

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vul…

Fix: 1.39.14 / 1.43.4+
Fix from $1,600 2026-02-03
Mediawiki MEDIUM 6.1
CVE-2025-61643

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/recentchanges/RecentChangeRCFeedNotifie…

Fix: 1.39.14 / 1.43.4+
Fix from $1,600 2026-02-03
Cargo CRITICAL 9.8
CVE-2024-47849

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allo…

Patch available
Fix from $2,300 2024-10-05
Cargo HIGH 8.8
CVE-2024-47846

Cross-Site Request Forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross Site Request Forgery.This issue affects Me…

Patch available
Fix from $1,950 2024-10-05
Cargo MEDIUM 6.1
CVE-2024-47847

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Car…

Patch available
Fix from $1,600 2024-10-05
Mediawiki MEDIUM 5.3
CVE-2024-47913

An issue was discovered in the AbuseFilter extension for MediaWiki before 1.39.9, 1.40.x and 1.41.x before 1.41.3, and 1.42.x before 1.42.2. An API c…

Fix: 1.39.9 / 1.41.3+
Fix from $1,600 2024-10-04
Mediawiki HIGH 7.5
CVE-2024-40597

An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. It can expose suppressed information for log events. (The log_delete…

Fix: after 1.42.1
Fix from $1,950 2024-07-07
Mediawiki MEDIUM 6.5
CVE-2024-40601

An issue was discovered in the MediaWikiChat extension for MediaWiki through 1.42.1. CSRF can occur in API modules.

Fix: after 1.42.1
Fix from $1,600 2024-07-07
Mediawiki MEDIUM 6.1
CVE-2024-23177

An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter.

Fix: 1.40.2+
Fix from $1,600 2024-01-12
Mediawiki MEDIUM 6.1
CVE-2024-23179

An issue was discovered in the GlobalBlocking extension in MediaWiki before 1.40.2. For a Special:GlobalBlock?uselang=x-xss URI, i18n-based XSS can o…

Fix: 1.40.2+
Fix from $1,600 2024-01-12
Mediawiki MEDIUM 5.4
CVE-2024-23178

An issue was discovered in the Phonos extension in MediaWiki before 1.40.2. PhonosButton.js allows i18n-based XSS via the phonos-purge-needed-error m…

Fix: 1.40.2+
Fix from $1,600 2024-01-12
Mediawiki MEDIUM 6.1
CVE-2024-23173

An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Specia…

Fix: 1.35.14 / 1.39.6+
Fix from $1,600 2024-01-12