Skip to content
Mediawiki Cargo vulnerabilities
-
mediawiki cargo, the wikimedia foundation mediawiki - cargo extension +1 more
Cargo Extension: SQLi in Special:Drilldown
CVE-2026-14363
6.9 Medium
-
mediawiki cargo, the wikimedia foundation mediawiki - cargo extension +1 more
SQLi in Cargo extension via year range filter
CVE-2026-58521
6.9 Medium
-
mediawiki cargo, the wikimedia foundation mediawiki - cargo extension +1 more
Stored XSS through Cargo's map format
CVE-2026-58519
6.9 Medium
-
mediawiki cargo, wikimedia foundation mediawiki - cargo extension +1 more
Stored XSS through the dynamic table format in Cargo
CVE-2026-39837
6.3 Medium
-
mediawiki cargo, wikimedia foundation mediawiki - cargo extension +1 more
Stored XSS through list fields on Cargo's page values and Special:CargoTables
CVE-2026-39841
6.3 Medium
-
mediawiki cargo, wikimedia foundation mediawiki - cargo extension +1 more
CSS injection in multiple Cargo display formats
CVE-2026-39840
5.1 Medium
-
mediawiki cargo, wikimedia foundation mediawiki - cargo extension +1 more
Stored XSS through URLs in Cargo's map format
CVE-2026-39839
6.3 Medium
-
mediawiki cargo, the wikimedia foundation mediawiki - cargo, wikimedia mediawiki-cargo +2 more
Various XSSes found in Cargo
CVE-2024-47847
Fix available
6.9 Medium
-
mediawiki cargo, the wikimedia foundation mediawiki - cargo, wikimedia mediawiki-cargo +2 more
Special:DeleteCargoTable and Special:SwitchCargoTable have no CSRF protection
CVE-2024-47846
6.9 Medium
-
mediawiki cargo, the wikimedia foundation mediawiki - cargo, wikimedia mediawiki-cargo +2 more
Backticks can allow the usage of not-allowed SQL functions
CVE-2024-47849
8.8 High