Skip to contentWikimedia Foundation Mediawiki - Cargo Extension vulnerabilities
- the wikimedia foundation mediawiki - cargo extensionXSS in Cargo's Special:CargoQuery page due to unsanitized table headersCVE-2026-1030496.1 Medium
- the wikimedia foundation mediawiki - cargo extensionCargo Exhibit field alias allows stored XSSCVE-2026-96878Public exploit6.9 Medium
- the wikimedia foundation mediawiki - cargo extensionReflected XSS through Cargo Drilldown full-text searchCVE-2026-96877Public exploit6.9 Medium
- the wikimedia foundation mediawiki - cargo extensionAnonymous reflected XSS in CargoExport invalid-alias errorsCVE-2026-96876Public exploit6.9 Medium
- the wikimedia foundation mediawiki - cargo extensionReflected XSS in Cargo Drilldown hierarchy filtersCVE-2026-96875Public exploit6.9 Medium
- the wikimedia foundation mediawiki - cargo extensionStored XSS in Cargo Drilldown tab namesCVE-2026-96874Public exploit2.3 Low
- mediawiki cargo, the wikimedia foundation mediawiki - cargo extension +1 moreCargo Extension: SQLi in Special:DrilldownCVE-2026-143636.9 Medium
- mediawiki cargo, the wikimedia foundation mediawiki - cargo extension +1 moreSQLi in Cargo extension via year range filterCVE-2026-585216.9 Medium
- mediawiki cargo, the wikimedia foundation mediawiki - cargo extension +1 moreStored XSS through Cargo's map formatCVE-2026-585196.9 Medium
- mediawiki cargo, wikimedia foundation mediawiki - cargo extension +1 moreStored XSS through the dynamic table format in CargoCVE-2026-398376.3 Medium
- mediawiki cargo, wikimedia foundation mediawiki - cargo extension +1 moreStored XSS through list fields on Cargo's page values and Special:CargoTablesCVE-2026-398416.3 Medium
- mediawiki cargo, wikimedia foundation mediawiki - cargo extension +1 moreCSS injection in multiple Cargo display formatsCVE-2026-398405.1 Medium
- mediawiki cargo, wikimedia foundation mediawiki - cargo extension +1 moreStored XSS through URLs in Cargo's map formatCVE-2026-398396.3 Medium
- the wikimedia foundation mediawiki - cargo extensionStored XSS through wikitext in CargoCVE-2025-62671Fix available6.9 Medium