Skip to contentThe Wikimedia Foundation vulnerabilities
Newest
- the wikimedia foundation mediawiki - confirm account extensionXSSes in Extension:ConfirmAccountCVE-2025-320745.4 Medium
- the wikimedia foundation mediawiki - tabs extensionIP and user agent leaks in Extension:TabsCVE-2025-320756.9 Medium
- the wikimedia foundation mediawiki - growth experiments extensioni18n XSS vulnerability in message growthexperimentsCVE-2025-320675.4 Medium
- the wikimedia foundation mediawiki - oauth extensionRevoking authorization of OAuth2 consumer does not invalidate refresh tokensCVE-2025-320685.4 Medium
- the wikimedia foundation mediawiki - wikibase media info extensionWikitext stored XSS on filepages due to dangerous WBMI serializationCVE-2025-320695.4 Medium
- the wikimedia foundation mediawiki - ajax poll extensionXSSes in AJAXPollCVE-2025-320705.4 Medium
- the wikimedia foundation mediawiki - wikidata extensionWikibase CommonsInlineImageFormatter: i18n XSSCVE-2025-320715.4 Medium
- the wikimedia foundation mediawiki - css extension, wikimedia mediawiki-extensions-css, wikimedia-extensions-css +2 morePath traversal when loading stylesheetsCVE-2024-47841EPSS 34.6%6.9 Medium
- the wikimedia foundation mediawiki - apex skin, wikimedia apex, mediawiki-apex skin +2 moreStored XSS through sidebar in Apex skinCVE-2024-478406.9 Medium
- mediawiki cargo, the wikimedia foundation mediawiki - cargo, wikimedia mediawiki-cargo +2 moreVarious XSSes found in CargoCVE-2024-47847Fix available6.9 Medium
- mediawiki cargo, the wikimedia foundation mediawiki - cargo, wikimedia mediawiki-cargo +2 moreSpecial:DeleteCargoTable and Special:SwitchCargoTable have no CSRF protectionCVE-2024-478466.9 Medium
- mediawiki cargo, the wikimedia foundation mediawiki - cargo, wikimedia mediawiki-cargo +2 moreBackticks can allow the usage of not-allowed SQL functionsCVE-2024-478498.8 High
- the wikimedia foundation mediawiki - css extension, wikimedia mediawiki-extensions-css, wikimedia-extensions-css +2 moreCSS sanitizer used incorrectly, and is easily bypassedCVE-2024-478456.9 Medium
- the wikimedia foundation mediawiki - pagetriage, wikimedia pagetriage +1 moreUser can review/unreview articles while blockedCVE-2024-478486.9 Medium