Skip to contentThe Wikimedia Foundation Mediawiki - Cargo vulnerabilities
- the wikimedia foundation mediawiki - cargo extensionXSS in Cargo's Special:CargoQuery page due to unsanitized table headersCVE-2026-1030496.1 Medium
- the wikimedia foundation mediawiki - cargo extensionCargo Exhibit field alias allows stored XSSCVE-2026-96878Public exploit6.9 Medium
- the wikimedia foundation mediawiki - cargo extensionReflected XSS through Cargo Drilldown full-text searchCVE-2026-96877Public exploit6.9 Medium
- the wikimedia foundation mediawiki - cargo extensionAnonymous reflected XSS in CargoExport invalid-alias errorsCVE-2026-96876Public exploit6.9 Medium
- the wikimedia foundation mediawiki - cargo extensionReflected XSS in Cargo Drilldown hierarchy filtersCVE-2026-96875Public exploit6.9 Medium
- the wikimedia foundation mediawiki - cargo extensionStored XSS in Cargo Drilldown tab namesCVE-2026-96874Public exploit2.3 Low
- mediawiki cargo, the wikimedia foundation mediawiki - cargo extension +1 moreCargo Extension: SQLi in Special:DrilldownCVE-2026-143636.9 Medium
- mediawiki cargo, the wikimedia foundation mediawiki - cargo extension +1 moreSQLi in Cargo extension via year range filterCVE-2026-585216.9 Medium
- mediawiki cargo, the wikimedia foundation mediawiki - cargo extension +1 moreStored XSS through Cargo's map formatCVE-2026-585196.9 Medium
- the wikimedia foundation mediawiki - cargo extensionStored XSS through wikitext in CargoCVE-2025-62671Fix available6.9 Medium
- mediawiki cargo, the wikimedia foundation mediawiki - cargo, wikimedia mediawiki-cargo +2 moreVarious XSSes found in CargoCVE-2024-47847Fix available6.9 Medium
- mediawiki cargo, the wikimedia foundation mediawiki - cargo, wikimedia mediawiki-cargo +2 moreSpecial:DeleteCargoTable and Special:SwitchCargoTable have no CSRF protectionCVE-2024-478466.9 Medium
- mediawiki cargo, the wikimedia foundation mediawiki - cargo, wikimedia mediawiki-cargo +2 moreBackticks can allow the usage of not-allowed SQL functionsCVE-2024-478498.8 High