Browse CVEs

MEDIUM 6.1 CVE-2026-39839 Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allow… Cargo 3.8.7+ Fix from $1,6002026-04-07 MEDIUM 6.1 CVE-2026-39840 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation Mediawiki - Cargo Extensio… Cargo 3.8.7+ Fix from $1,6002026-04-07 MEDIUM 5.4 CVE-2026-39837 Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in WikiWorks Mediawiki - Cargo Extension allows Stored XS… Cargo 3.8.7+ Fix from $1,6002026-04-07 CRITICAL 9.8 CVE-2025-67484 Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiFormatXml.Php. This issue affec… Mediawiki 1.39.16 / 1.43.6+ Fix from $2,3002026-02-03 MEDIUM 6.5 CVE-2025-67480 Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryRevisionsBase.Php. This is… Mediawiki 1.39.16 / 1.43.6+ Fix from $1,6002026-02-03 MEDIUM 6.1 CVE-2025-67481 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vul… Mediawiki 1.39.16 / 1.43.6+ Fix from $1,6002026-02-03 MEDIUM 6.1 CVE-2025-67483 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vul… Mediawiki 1.43.6 / 1.44.3+ Fix from $1,6002026-02-03 HIGH 8.8 CVE-2025-67478 Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files includes/Mail/UserMailer.Php. This issue affect… Checkuser 1.39.14 / 1.43.4+ Fix from $1,9502026-02-03 MEDIUM 6.1 CVE-2025-61656 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This … Visual Editor 1.39.14 / 1.43.4+ Fix from $1,6002026-02-03 MEDIUM 6.1 CVE-2025-67475 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vul… Mediawiki 1.39.16 / 1.43.6+ Fix from $1,6002026-02-03 MEDIUM 6.1 CVE-2025-67477 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vul… Mediawiki 1.44.3+ Fix from $1,6002026-02-03 MEDIUM 6.1 CVE-2025-61651 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vul… Checkuser 1.44.1+ Fix from $1,6002026-02-03 MEDIUM 6.1 CVE-2025-61655 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation VisualEditor. This … Visual Editor 1.39.14 / 1.43.4+ Fix from $1,6002026-02-03 MEDIUM 6.1 CVE-2025-61645 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vul… Mediawiki 1.44.1+ Fix from $1,6002026-02-03 MEDIUM 6.1 CVE-2025-61648 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vul… Checkuser 1.44.1+ Fix from $1,6002026-02-03 MEDIUM 5.4 CVE-2025-61646 Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/RecentChanges/EnhancedChangesList.Php. … Mediawiki 1.39.14 / 1.43.4+ Fix from $1,6002026-02-03 MEDIUM 6.1 CVE-2025-11261 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vul… Mediawiki 1.39.15 / 1.43.5+ Fix from $1,6002026-02-03 MEDIUM 6.1 CVE-2025-61641 Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiQueryAllPages.Php. This issue a… Mediawiki 1.39.14 / 1.43.4+ Fix from $1,6002026-02-03 MEDIUM 6.1 CVE-2025-61642 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vul… Mediawiki 1.39.14 / 1.43.4+ Fix from $1,6002026-02-03 MEDIUM 6.1 CVE-2025-61643 Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/recentchanges/RecentChangeRCFeedNotifie… Mediawiki 1.39.14 / 1.43.4+ Fix from $1,6002026-02-03 CRITICAL 9.8 CVE-2024-47849 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allo… Cargo Patch available Fix from $2,3002024-10-05 HIGH 8.8 CVE-2024-47846 Cross-Site Request Forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross Site Request Forgery.This issue affects Me… Cargo Patch available Fix from $1,9502024-10-05 MEDIUM 6.1 CVE-2024-47847 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Car… Cargo Patch available Fix from $1,6002024-10-05 MEDIUM 5.3 CVE-2024-47913 An issue was discovered in the AbuseFilter extension for MediaWiki before 1.39.9, 1.40.x and 1.41.x before 1.41.3, and 1.42.x before 1.42.2. An API c… Mediawiki 1.39.9 / 1.41.3+ Fix from $1,6002024-10-04 HIGH 7.5 CVE-2024-40597 An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. It can expose suppressed information for log events. (The log_delete… Mediawiki after 1.42.1 Fix from $1,9502024-07-07 MEDIUM 6.5 CVE-2024-40601 An issue was discovered in the MediaWikiChat extension for MediaWiki through 1.42.1. CSRF can occur in API modules. Mediawiki after 1.42.1 Fix from $1,6002024-07-07 MEDIUM 6.1 CVE-2024-23177 An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter. Mediawiki 1.40.2+ Fix from $1,6002024-01-12 MEDIUM 6.1 CVE-2024-23179 An issue was discovered in the GlobalBlocking extension in MediaWiki before 1.40.2. For a Special:GlobalBlock?uselang=x-xss URI, i18n-based XSS can o… Mediawiki 1.40.2+ Fix from $1,6002024-01-12 MEDIUM 5.4 CVE-2024-23178 An issue was discovered in the Phonos extension in MediaWiki before 1.40.2. PhonosButton.js allows i18n-based XSS via the phonos-purge-needed-error m… Mediawiki 1.40.2+ Fix from $1,6002024-01-12 MEDIUM 6.1 CVE-2024-23173 An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Specia… Mediawiki 1.35.14 / 1.39.6+ Fix from $1,6002024-01-12