mediawiki vulnerabilities (Bitnami)
172 vulnerabilities.
mediawikiBitnamiMediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry...6.1 MediummediawikiBitnamiMediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one...5.3 MediummediawikiBitnamiIn MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can...7.5 HighmediawikiBitnamiincludes/CologneBlueTemplate.php in the CologneBlue skin for MediaWiki through 1.35 allows XSS...4.8 MediummediawikiBitnamiThe PollNY extension for MediaWiki through 1.35 allows XSS via an answer option for a poll...5.4 MediummediawikiBitnamiThe RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title...5.4 MediummediawikiBitnamiThe FileImporter extension in MediaWiki through 1.35.0 was not properly attributing various user...4.3 MediummediawikiBitnamiAn information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1...7.5 HighmediawikiBitnamiMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiBitnamiAn issue was discovered in the FileImporter extension for MediaWiki before 1.34.4. An attacker...7.5 HighmediawikiBitnamiXSS exists in the MobileFrontend extension for MediaWiki before 1.34.4 because section.line is...6.1 MediummediawikiBitnamiMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiBitnamiOATHAuth extension in MediaWiki is not implementing rate limit7.5 HighmediawikiBitnamiMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiBitnamiMediaWiki Special:UserRights exposes the existence of hidden users5.3 MediummediawikiBitnamiMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiBitnamiimg_auth.php may leak private extension images into the public cache3.1 LowmediawikiBitnamiMediaWiki Open Redirect vulnerability6.1 MediummediawikiBitnamiThe CentralAuth extension through REL1_34 for MediaWiki allows remote attackers to obtain...7.5 HighmediawikiBitnamiMediaWiki makeCollapsible allows applying event handler to any CSS selector5.3 MediummediawikiBitnamiIn the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related...9.8 CriticalmediawikiBitnamiThe WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax...6.1 Medium