Wikimedia Foundation Mediawiki

Latest vulnerabilities

• CVE-2026-103051 CVSS 6.1 medium Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki …
• CVE-2026-103050 CVSS 6.1 medium Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki …
• CVE-2026-103049 CVSS 6.1 medium Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki …
• CVE-2026-103048 CVSS 6.1 medium URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - Collection extension allows Fake…
• CVE-2026-103047 CVSS 6.1 medium Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki …
• CVE-2026-103046 CVSS 6.1 medium Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation MediaWiki …
• CVE-2026-103045 CVSS 6.1 medium Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki …
• CVE-2026-103044 CVSS 9.8 critical XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension allows XML…
• CVE-2026-102796 CVSS 7.5 high Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wikimedia Foundation Mediawiki …
• CVE-2026-100245 CVSS 6.1 medium Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation…
• CVE-2026-100244 CVSS 7.5 high Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows…
• CVE-2026-100243 CVSS 6.1 medium Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation…
• CVE-2026-100242 CVSS 7.5 high Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki …
• CVE-2026-100241 CVSS 7.5 high Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows…
• CVE-2026-100240 CVSS 9.1 critical Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Functionality Not…
• CVE-2026-100238 CVSS 6.1 medium Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation…
• CVE-2026-100383 CVSS 4.8 medium Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation…
• CVE-2026-100382 CVSS 10.0 critical Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia Foundation Mediawiki…
• CVE-2026-100381 CVSS 5.3 medium Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation…
• CVE-2026-96879 CVSS 6.9 medium Improper removal of sensitive information before storage or transfer vulnerability in Wikimedia Foundation's Mediawiki - FlaggedRevs…
• CVE-2026-100380 CVSS 5.3 medium Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation…
• CVE-2026-100378 CVSS 5.3 medium Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly…
• CVE-2026-100377 CVSS 6.9 medium Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows…
• CVE-2026-100376 CVSS 4.8 medium Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation…
• CVE-2026-96878 CVSS 6.9 medium Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows…
• CVE-2026-96877 CVSS 6.9 medium Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows…
• CVE-2026-96876 CVSS 6.9 medium Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows…
• CVE-2026-96875 CVSS 6.9 medium Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - Cargo extension allows…
• CVE-2026-100237 CVSS 6.1 medium Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki …
• CVE-2026-96874 CVSS 2.3 low Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in the Mediawiki - Cargo extension…