Skip to contentMediawiki Mediawik vulnerabilities
- mediawikiAn issue was discovered in the Nimbus skin for MediaWiki through 1.42.1. There is Stored XSS via...CVE-2024-40604Fix available4.8 Medium
- mediawikiAn issue was discovered in the ArticleRatings extension for MediaWiki through 1.42.1. Special...CVE-2024-40603Fix available4.3 Medium
- mediawikiAn issue was discovered in the Tempo skin for MediaWiki through 1.42.1. There is stored XSS via...CVE-2024-40602Fix available4.8 Medium
- mediawikiAn issue was discovered in the MediaWikiChat extension for MediaWiki through 1.42.1. CSRF can...CVE-2024-40601Fix available6.5 Medium
- mediawiki, mediawiki metrolook skin +1 moreAn issue was discovered in the Metrolook skin for MediaWiki through 1.42.1. There is stored XSS...CVE-2024-40600Fix available4.8 Medium
- mediawikiAn issue was discovered in the GuMaxDD skin for MediaWiki through 1.42.1. There is stored XSS via...CVE-2024-40599Fix available4.8 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The API can...CVE-2024-40598Fix available4.3 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. It can expose...CVE-2024-40597Fix available7.5 High
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The Special...CVE-2024-40596Fix available4.3 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in includes/CommentFormatter/CommentParser.php in MediaWiki before 1.39.7...CVE-2024-34507Fix available7.4 High
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in WikibaseLexeme in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1...CVE-2024-34502Fix available9.8 Critical
- mediawiki, fedoraproject fedora +1 moreMediaWiki UnlinkedWikibase Cross-site Scripting vulnerabilityCVE-2024-34500Fix available6.1 Medium
- mediawikiAn issue was discovered in VectorComponentUserLinks.php in the Vector Skin component in MediaWiki...CVE-2023-45361Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40...CVE-2024-34506Fix available7.5 High
- mediawikiAn issue was discovered in the Cargo extension for MediaWiki through 1.39.3. There is mishandling...CVE-2023-291348.6 High
- mediawikiAn issue was discovered in the GlobalBlocking extension in MediaWiki before 1.40.2. For a Special...CVE-2024-23179Fix available6.1 Medium
- mediawikiAn issue was discovered in the Phonos extension in MediaWiki before 1.40.2. PhonosButton.js...CVE-2024-23178Fix available5.4 Medium
- mediawikiAn issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur...CVE-2024-23177Fix available6.1 Medium
- mediawikiAn issue was discovered in the PageTriage extension in MediaWiki before 1.35.14, 1.36.x through 1...CVE-2024-23174Fix available5.4 Medium
- mediawikiMediaWiki Cargo Extension Cross-site Scripting vulnerabilityCVE-2024-23173Fix available6.1 Medium
- mediawikiAn issue was discovered in the CheckUser extension in MediaWiki before 1.35.14, 1.36.x through 1...CVE-2024-23172Fix available5.4 Medium
- mediawikiAn issue was discovered in the CampaignEvents extension in MediaWiki before 1.35.14, 1.36.x...CVE-2024-23171Fix available5.4 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1...CVE-2023-51704Fix available6.1 Medium
- mediawikiAn issue was discovered in DifferenceEngine.php in MediaWiki before 1.35.12, 1.36.x through 1.39...CVE-2023-45362Fix available4.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1...CVE-2023-45360Fix available5.4 Medium
- mediawikiAn issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through...CVE-2023-45374Fix available5.3 Medium
- mediawikiAn issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x...CVE-2023-45373Fix available6.1 Medium
- mediawikiAn issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1...CVE-2023-45372Fix available5.3 Medium
- mediawikiAn issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1...CVE-2023-45371Fix available7.5 High
- mediawikiAn issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through...CVE-2023-45370Fix available5.3 Medium
- mediawikiAn issue was discovered in the PageTriage extension for MediaWiki before 1.35.12, 1.36.x through...CVE-2023-45369Fix available4.3 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki before 1.35.12, 1.36.x through 1...CVE-2023-45367Fix available6.5 Medium
- mediawiki, debian linux +1 moreAn issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1...CVE-2023-45364Fix available5.3 Medium
- mediawiki, debian linux +1 moreMediaWiki Denial of Service vulnerabilityCVE-2023-45363Fix availableEPSS 23.8%7.5 High
- mediawiki, debian linux +1 moreStored XSS leads to privilege escalation in MediaWiki v1.40.0CVE-2023-3550Fix available7.3 High
- mediawikiAn issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x...CVE-2023-36674Fix available5.3 Medium
- mediawikiAn issue was discovered in the ProofreadPage (aka Proofread Page) extension for MediaWiki through...CVE-2023-37305Fix available5.3 Medium
- mediawikiAn issue was discovered in the DoubleWiki extension for MediaWiki through 1.39.3. includes...CVE-2023-37304Fix available5.4 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In certain...CVE-2023-37303Fix available9.8 Critical
- mediawikiMediaWiki Cross-site Scripting vulnerabilityCVE-2023-37302Fix available6.1 Medium
- mediawikiAn issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it...CVE-2023-37301Fix available5.3 Medium
- mediawikiAn issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through...CVE-2023-37300Fix available5.3 Medium
- mediawikiAn issue was discovered in the Cargo extension for MediaWiki through 1.39.3. It allows one to...CVE-2023-37256Fix available6.1 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In Special...CVE-2023-37255Fix available6.1 Medium
- mediawikiAn issue was discovered in the Cargo extension for MediaWiki through 1.39.3. XSS can occur in...CVE-2023-37254Fix available6.1 Medium
- mediawikiAn issue was discovered in the GoogleAnalyticsMetrics extension for MediaWiki through 1.39.3. The...CVE-2023-37251Fix available6.1 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x...CVE-2023-36675Fix available6.1 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x...CVE-2022-41766Fix available4.3 Medium
- mediawikiAn issue was discovered in the VisualEditor extension in MediaWiki before 1.31.13, and 1.32.x...CVE-2021-30153Fix available4.3 Medium
- mediawiki, fedoraproject fedora +1 moreX-Forwarded-For header allows brute-forcing autoblocked IP addressesCVE-2023-29141Fix available9.8 Critical
- Show moreLoading…