Browse CVEs

MEDIUM 5.4 CVE-2025-43861 ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 2f177dc, ManageWiki is vulnerable to reflected or stored XSS in t… Managewiki 2025-04-24+ Fix from $1,6002025-04-24 HIGH 8.0 CVE-2025-32956 ManageWiki is a MediaWiki extension allowing users to manage wikis. Versions before commit f504ed8, are vulnerable to SQL injection when renaming a n… Managewiki 2025-04-20+ Fix from $1,9502025-04-21 MEDIUM 6.1 CVE-2024-47781 CreateWiki is an extension used at Miraheze for requesting & creating wikis. The name of requested wikis is not escaped on Special:RequestWikiQueue, … Createwiki 2024-10-07+ Fix from $1,6002024-10-07 MEDIUM 5.4 CVE-2024-47782 WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. Special:WikiDiscover is a special page that lists all … Wikidiscover 2024-10-06+ Fix from $1,6002024-10-07 MEDIUM 6.5 CVE-2024-29898 CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. An oversight during the writing of the patch for CVE-2024-29897 may hav… Createwiki 2024-03-27+ Fix from $1,6002024-03-28 MEDIUM 5.4 CVE-2024-25109 ManageWiki is a MediaWiki extension allowing users to manage wikis. Special:ManageWiki does not escape escape interface messages on the `columns` and… Managewiki 2024-02-09+ Fix from $1,6002024-02-09 MEDIUM 6.1 CVE-2024-25107 WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. On Special:WikiDiscover, the `Language::date` function… Wikidiscover 2023-02-08+ Fix from $1,6002024-02-08 MEDIUM 5.3 CVE-2022-24813 CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. Without the patch for this issue, anonymous comments can be made using … Createwiki 2022-04-02+ Fix from $1,6002022-04-04 MEDIUM 6.1 CVE-2021-39186 GlobalNewFiles is a MediaWiki extension maintained by Miraheze. Prior to commit number cee254e1b158cdb0ddbea716b1d3edc31fa4fb5d, the username column … Globalnewfiles 2021-09-01+ Fix from $1,6002021-09-01 MEDIUM 5.4 CVE-2021-32774 DataDump is a MediaWiki extension that provides dumps of wikis. Prior to commit 67a82b76e186925330b89ace9c5fd893a300830b, DataDump had no protection … Datadump 2021-07-07+ Fix from $1,6002021-07-20 MEDIUM 6.5 CVE-2021-32722 GlobalNewFiles is a mediawiki extension. Versions prior to 48be7adb70568e20e961ea1cb70904454a671b1d are affected by an uncontrolled resource consumpt… Globalnewfiles Patch available Fix from $1,6002021-06-28 HIGH 7.5 CVE-2021-29483 ManageWiki is an extension to the MediaWiki project. The 'wikiconfig' API leaked the value of private configuration variables set through the ManageW… Managewiki 2021-04-28+ Fix from $1,9502021-04-28