Lucene search
+L

9 matches found

CNVD
CNVD
•added 2025/10/23 12:00 a.m.•9 views

Mediawiki - LastModified Extension Cross-Site Scripting Vulnerability

Mediawiki - LastModified Extension is a MediaWiki extension for displaying the last modified time of a page. Mediawiki - LastModified Extension suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which...

6.9CVSS6.3AI score0.00341EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/21 5:55 p.m.•28 views

CVE-2025-62693

A flaw was found in the LastModified extension in Mediawiki. The lastmodified-seconds, lastmodified-minutes, lastmodified-hours, lastmodified-days, lastmodified-months and lastmodified-years system messages are inserted into raw HTML without proper escaping, allowing an attacker to inject malicio...

6.9CVSS5.6AI score0.00341EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2025/10/20 6:15 p.m.•19 views

UBUNTU-CVE-2025-62693

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - LastModified Extension allows Stored XSS.This issue affects Mediawiki - LastModified Extension: from master before 1.39...

6.9CVSS5.9AI score0.00341EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/10/20 5:51 p.m.•23 views

CVE-2025-62693 Stored XSS through system messages in LastModified

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - LastModified Extension allows Stored XSS.This issue affects Mediawiki - LastModified Extension: from master before 1.39...

6.9CVSS0.00341EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/20 5:51 p.m.•15 views

EUVD-2025-35084

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - LastModified Extension allows Stored XSS.This issue affects Mediawiki - LastModified Extension: from master before 1.39...

6.9CVSS5.9AI score0.00341EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/10/20 5:51 p.m.•3 views

CVE-2025-62693 Stored XSS through system messages in LastModified

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - LastModified Extension allows Stored XSS.This issue affects Mediawiki - LastModified Extension: from master before 1.39...

6.9CVSS5.9AI score0.00341EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/20 12:00 a.m.•4 views

PT-2025-42800

Name of the Vulnerable Software and Affected Versions Mediawiki - LastModified Extension versions prior to 1.39 Description The Mediawiki - LastModified Extension contains a flaw related to improper input handling during web page generation, potentially leading to Stored Cross-site Scripting XSS...

6.9CVSS5.9AI score0.00341EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/10/20 12:00 a.m.•16 views

MediaWiki – LastModified Extension Security Vulnerability

Mediawiki - LastModified Extension is a MediaWiki extension for displaying the last modified time of a page. Mediawiki - LastModified Extension suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which...

6.9CVSS6.3AI score0.00341EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/20 12:00 a.m.•5 views

CVE-2025-62693: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - LastModified Extension allows Stored XSS.This issue affects Mediawiki - LastModified Extension: from master before 1.39...

6.9CVSS5.9AI score0.00341EPSS
SaveExploits0References2
Rows per page
Query Builder