Skip to contentThe Wikimedia Foundation Mediawiki - Cargo Extension vulnerabilities
- the wikimedia foundation mediawiki - cargo extensionXSS in Cargo's Special:CargoQuery page due to unsanitized table headersCVE-2026-1030496.1 Medium
- the wikimedia foundation mediawiki - cargo extensionCargo Exhibit field alias allows stored XSSCVE-2026-96878Public exploit6.9 Medium
- the wikimedia foundation mediawiki - cargo extensionReflected XSS through Cargo Drilldown full-text searchCVE-2026-96877Public exploit6.9 Medium
- the wikimedia foundation mediawiki - cargo extensionAnonymous reflected XSS in CargoExport invalid-alias errorsCVE-2026-96876Public exploit6.9 Medium
- the wikimedia foundation mediawiki - cargo extensionReflected XSS in Cargo Drilldown hierarchy filtersCVE-2026-96875Public exploit6.9 Medium
- the wikimedia foundation mediawiki - cargo extensionStored XSS in Cargo Drilldown tab namesCVE-2026-96874Public exploit2.3 Low
- mediawiki cargo, the wikimedia foundation mediawiki - cargo extension +1 moreCargo Extension: SQLi in Special:DrilldownCVE-2026-143636.9 Medium
- mediawiki cargo, the wikimedia foundation mediawiki - cargo extension +1 moreSQLi in Cargo extension via year range filterCVE-2026-585216.9 Medium
- mediawiki cargo, the wikimedia foundation mediawiki - cargo extension +1 moreStored XSS through Cargo's map formatCVE-2026-585196.9 Medium
- the wikimedia foundation mediawiki - cargo extensionStored XSS through wikitext in CargoCVE-2025-62671Fix available6.9 Medium