Vulnerability index

Browse CVEs

249 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Mediawiki MEDIUM 5.4
CVE-2024-23171

An issue was discovered in the CampaignEvents extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. T…

Fix: 1.35.14 / 1.39.6+
Fix from $1,600 2024-01-12
Mediawiki MEDIUM 5.4
CVE-2024-23172

An issue was discovered in the CheckUser extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. XSS ca…

Fix: 1.35.14 / 1.39.6+
Fix from $1,600 2024-01-12
Mediawiki MEDIUM 5.4
CVE-2024-23174

An issue was discovered in the PageTriage extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. XSS c…

Fix: 1.35.14 / 1.39.6+
Fix from $1,600 2024-01-12
Mediawiki MEDIUM 6.1
CVE-2023-51704

An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. In includes/logging/RightsLogForm…

Fix: 1.35.14 / 1.39.6+
Fix from $1,600 2023-12-22
Mediawiki MEDIUM 5.4
CVE-2023-45360

An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is XSS in youhavenewmessage…

Fix: 1.35.12 / 1.39.5+
Fix from $1,600 2023-11-03
Mediawiki HIGH 7.5
CVE-2023-45371

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There …

Fix: 1.35.12 / 1.39.5+
Fix from $1,950 2023-10-09
Mediawiki MEDIUM 6.1
CVE-2023-45373

An issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. X…

Fix: 1.35.12 / 1.39.5+
Fix from $1,600 2023-10-09
Mediawiki MEDIUM 5.3
CVE-2023-45370

An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. Spo…

Fix: 1.35.12 / 1.39.5+
Fix from $1,600 2023-10-09
Mediawiki MEDIUM 5.3
CVE-2023-45372

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During…

Fix: 1.35.12 / 1.39.5+
Fix from $1,600 2023-10-09
Mediawiki MEDIUM 5.3
CVE-2023-45374

An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It …

Fix: 1.35.12 / 1.39.5+
Fix from $1,600 2023-10-09
Mediawiki MEDIUM 6.5
CVE-2023-45367

An issue was discovered in the CheckUser extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. A use…

Fix: 1.35.12 / 1.39.5+
Fix from $1,600 2023-10-09
Mediawiki MEDIUM 5.3
CVE-2023-36674

An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x before 1.39.4, and 1.40.x before 1.40.1. It is possi…

Fix: 1.35.11 / 1.38.7+
Fix from $1,600 2023-08-20
Mediawiki CRITICAL 9.8
CVE-2023-37303

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In certain situations, an attempt to block a user fails after a temp…

Fix: after 1.39.3
Fix from $2,300 2023-06-30
Mediawiki MEDIUM 6.1
CVE-2023-37302

An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through 1.39.3. There is XSS via a crafted badge title attribute. This is also …

Fix: after 1.39.3
Fix from $1,600 2023-06-30
Mediawiki MEDIUM 5.4
CVE-2023-37304

An issue was discovered in the DoubleWiki extension for MediaWiki through 1.39.3. includes/DoubleWiki.php allows XSS via the column alignment feature.

Fix: after 1.39.3
Fix from $1,600 2023-06-30
Mediawiki MEDIUM 5.3
CVE-2023-37300

An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3. There is incorrect access control for visibi…

Fix: after 1.39.3
Fix from $1,600 2023-06-30
Mediawiki MEDIUM 5.3
CVE-2023-37301

An issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it doesn't use EditEntity for undo and restore, the in…

Fix: after 1.39.3
Fix from $1,600 2023-06-30
Mediawiki MEDIUM 5.3
CVE-2023-37305

An issue was discovered in the ProofreadPage (aka Proofread Page) extension for MediaWiki through 1.39.3. In includes/Page/PageContentHandler.php and…

Fix: after 1.39.3
Fix from $1,600 2023-06-30
Mediawiki MEDIUM 6.1
CVE-2023-37254

An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. XSS can occur in Special:CargoQuery via a crafted page item when using t…

Fix: after 1.39.3
Fix from $1,600 2023-06-29
Mediawiki MEDIUM 6.1
CVE-2023-37255

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In Special:CheckUser, a check of the "get edits" type is vulnerable …

Fix: after 1.39.3
Fix from $1,600 2023-06-29
Mediawiki MEDIUM 6.1
CVE-2023-37256

An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. It allows one to store javascript: URLs in URL fields, and automatically…

Fix: after 1.39.3
Fix from $1,600 2023-06-29
Mediawiki MEDIUM 6.1
CVE-2023-37251

An issue was discovered in the GoogleAnalyticsMetrics extension for MediaWiki through 1.39.3. The googleanalyticstrackurl parser function does not pr…

Fix: after 1.39.3
Fix from $1,600 2023-06-29
Mediawiki MEDIUM 6.1
CVE-2023-36675

An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, and 1.39.x before 1.39.4. BlockLogFormatter.php in BlockLog…

Fix: 1.35.11 / 1.38.7+
Fix from $1,600 2023-06-26
Score CRITICAL 9.8
CVE-2020-29007

The Score extension through 0.3.0 for MediaWiki has a remote code execution vulnerability due to improper sandboxing of the GNU LilyPond executable. …

Fix: after 0.3.0
Fix from $2,300 2023-04-15
Mediawiki MEDIUM 6.5
CVE-2023-29139

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. When a user with checkuserlog permissions makes many CheckUserLog AP…

Fix: after 1.39.3
Fix from $1,600 2023-03-31
Mediawiki MEDIUM 5.3
CVE-2023-29140

An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. Attackers might be able to see edits for which the username …

Fix: after 1.39.3
Fix from $1,600 2023-03-31
Matomo MEDIUM 6.1
CVE-2017-20175

A vulnerability classified as problematic has been found in DaSchTour matomo-mediawiki-extension up to 2.4.2 on MediaWiki. This affects an unknown pa…

Fix: 2.4.3+
Fix from $1,600 2023-02-05
Mediawiki MEDIUM 5.3
CVE-2022-39193

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.x. Various components of this extension can expose information on the p…

Patch available
Fix from $1,600 2023-01-20
Mediawiki MEDIUM 5.4
CVE-2023-22910

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. There is XSS in Wikibase date form…

Fix: 1.35.9 / 1.38.5+
Fix from $1,600 2023-01-20
Mediawiki MEDIUM 5.3
CVE-2023-22912

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. CheckUser TokenManager insecurely …

Fix: 1.35.9 / 1.38.5+
Fix from $1,600 2023-01-20