CVE-2025-62670

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - FlexDiagrams Extension allows Stored XSS.This issue affects Mediawiki - FlexDiagrams Extension: master...

CVE-2025-62652

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...

CVE-2025-62667

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Stored XSS.This issue affects Mediawiki - GrowthExperiments Extension: from master before 1.39...

MediaWiki - PageForms extension 安全漏洞

MediaWiki - PageForms extension is an open source page editing plugin for MediaWiki. A security vulnerability exists in MediaWiki - PageForms extension version 1.44, which stems from improper input neutralization and could lead to a stored cross-site scripting attack...

Mediawiki GlobalBlocking Extension 安全漏洞

Mediawiki GlobalBlocking Extension is an extension of the Wikimedia Foundation USA. A security vulnerability exists in Mediawiki GlobalBlocking Extension versions 1.43 and 1.44, which stems from improper input neutralization and could lead to a stored cross-site scripting attack...

MediaWiki - LastModified Extension 安全漏洞

Mediawiki - LastModified Extension is a MediaWiki extension for displaying the last modified time of a page. Mediawiki - LastModified Extension suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which...

PT-2025-42801

Name of the Vulnerable Software and Affected Versions Mediawiki - ExternalGuidance versions prior to 1.39 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Stored Cross-site Scripting XSS condition. This allows for the...

CVE-2025-48087

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jason C. Memberlite Shortcodes memberlite-shortcodes allows Stored XSS.This issue affects Memberlite Shortcodes: from n/a through 1.4.1...

CVE-2025-62662

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - AdvancedSearch Extension allows Stored XSS.This issue affects Mediawiki - AdvancedSearch Extension: from master before 1.39...

PT-2025-42680

Name of the Vulnerable Software and Affected Versions Mediawiki - Skin:BlueSky versions prior to 1.39 Description A flaw exists in Mediawiki - Skin:BlueSky that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The...

PT-2025-42678

Name of the Vulnerable Software and Affected Versions Mediawiki - UploadWizard Extension versions prior to 1.39 Description A flaw exists in the Mediawiki - UploadWizard Extension that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web pag...

Mediawiki - FlexDiagrams Extension 安全漏洞

Mediawiki - FlexDiagrams Extension is an extension to MediaWiki for embedding and displaying diagrams or flowcharts in wiki pages. Mediawiki - FlexDiagrams Extension suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...

Mediawiki - GrowthExperiments Extension 安全漏洞

Mediawiki - GrowthExperiments Extension is an extension to MediaWiki designed to increase new user engagement and the quality of content contributions through a task system, a recommendation mechanism and a mentor feature. A cross-site scripting vulnerability exists in Mediawiki - GrowthExperimen...

Mediawiki - Skin:BlueSky 安全漏洞

Mediawiki - Skin:BlueSky is an open source appearance plugin for Mediawiki. A security vulnerability exists in Mediawiki - Skin:BlueSky versions prior to 1.39, which stems from improper input neutralization and could lead to a stored cross-site scripting attack...

PT-2025-42677

Name of the Vulnerable Software and Affected Versions Mediawiki - AdvancedSearch Extension versions prior to 1.39 Description A flaw exists in the Mediawiki - AdvancedSearch Extension that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web...

PT-2025-42686

Name of the Vulnerable Software and Affected Versions Mediawiki - Cargo Extension affected versions not specified Description The Wikimedia Foundation Mediawiki - Cargo Extension contains a flaw related to improper input neutralization during web page generation, potentially leading to Stored...

CVE-2025-62654 Stored XSS through system messages in QuizGame

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44...

PT-2025-42666

Name of the Vulnerable Software and Affected Versions MediaWiki PollNY extension versions 1.39, 1.43, and 1.44 Description The Wikimedia Foundation MediaWiki PollNY extension contains a flaw related to improper input neutralization during web page generation, potentially leading to Stored...

CVE-2025-8459

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Centreon Infra Monitoring Monitoring recurrent downtime scheduler modules allows Stored XSS.This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18,...

CVE-2025-58324

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker ...