CVE-2025-61634

A flaw was found in MediaWiki, associated with the includes/Rest/Handler/PageHTMLHandler.Php program file, which is involved in page handling. This vulnerability could potentially be exploited by a remote attacker without requiring special privileges, but it does necessitate user interaction. Bas...

CVE-2025-67480

A flaw was found in MediaWiki. This vulnerability, associated with the ApiQueryRevisionsBase.Php program file, could be exploited by a remote attacker with low privileges. However, based on the provided CVSS v4 score, this flaw does not have a direct security impact on the confidentiality,...

CVE-2025-61639

A flaw was found in MediaWiki. This vulnerability, categorized as an Exposure of Sensitive Information to an Unauthorized Actor, allows an unauthorized individual to access sensitive data. The issue stems from how MediaWiki handles logging and recent changes, potentially leading to the disclosure...

CVE-2025-6589

A flaw was found in MediaWiki. An authenticated user with high privileges could potentially exploit a vulnerability related to the BlockListPager.Php file. This could lead to a low impact on confidentiality, potentially disclosing limited information. Mitigation Mitigation for this issue is eithe...

CVE-2025-61643

A flaw was found in MediaWiki. This vulnerability, associated with the RecentChangeRCFeedNotifier.Php program file, could allow a remote unauthenticated attacker to disclose limited information. The specific nature of the information disclosure is not detailed, but the overall impact is considere...

CVE-2025-6593

A flaw was found in MediaWiki. A remote attacker, by enticing a user to interact with malicious content, could potentially exploit a vulnerability in the includes/user/User.Php file. This could lead to the disclosure of limited sensitive information. Mitigation Mitigation for this issue is either...

CVE-2025-6591

A flaw was found in MediaWiki, specifically within the ApiFeedContributions.Php program file. This vulnerability could potentially be exploited by a remote attacker with high privileges, requiring user interaction. Mitigation Mitigation for this issue is either not available or the currently...

CVE-2025-6590

A flaw was found in MediaWiki. This vulnerability allows an unauthorized actor to expose sensitive information due to an issue associated with the program file includes/htmlform/fields/HTMLUserTextField.Php. This could lead to the disclosure of confidential data. Mitigation Mitigation for this...

CVE-2025-61638

A flaw was found in MediaWiki. This vulnerability, identified as Cross-site Scripting XSS, allows a remote attacker to inject malicious scripts into web pages due to improper neutralization of input during web page generation. When a user views an affected page, the malicious code can execute in...

CVE-2025-61636

A flaw was found in MediaWiki. This vulnerability, known as Cross-site Scripting XSS, occurs due to improper handling of user-supplied input during web page generation. A remote attacker could exploit this by injecting malicious scripts into web pages, potentially leading to information disclosur...

CVE-2025-67481

A flaw was found in MediaWiki. This vulnerability, known as Cross-site Scripting XSS, allows a remote attacker to inject malicious scripts into web pages. By failing to properly neutralize input during web page generation, MediaWiki can be exploited to execute arbitrary code in the context of a...

CVE-2025-61645

A flaw was found in MediaWiki. This cross-site scripting XSS vulnerability, located in the includes/pager/CodexTablePager.Php program file, allows an attacker to inject malicious scripts into web pages. This can lead to information disclosure, where sensitive user data might be exposed, or enable...

CVE-2025-67476

A flaw was found in MediaWiki. This vulnerability, located in the includes/Import/ImportableOldRevisionImporter.Php file, may allow a remote attacker with low privileges to disclose sensitive information. The flaw occurs during the processing of old revisions, potentially leading to unintended...

CVE-2025-67483

A flaw was found in MediaWiki. This cross-site scripting XSS vulnerability occurs due to improper neutralization of input during web page generation within the resources/src/mediawiki.Page.Preview.Js program file. A remote attacker with high privileges could exploit this flaw to inject malicious...

CVE-2025-6597

A flaw was found in MediaWiki, specifically within the includes/auth/AuthManager.Php program file. This vulnerability affects the authentication management component. The exact nature and impact of this flaw are not fully detailed in the available information, but it indicates a weakness in how...

CVE-2025-11261

A flaw was found in MediaWiki. This vulnerability, known as Cross-site Scripting XSS, occurs due to improper neutralization of input during web page generation. A remote attacker could exploit this by injecting malicious scripts into web pages. Successful exploitation could lead to arbitrary code...

CVE-2025-67479

A flaw was found in Wikimedia Foundation MediaWiki and Cite. This vulnerability is associated with the software's parsing and sanitization functions, specifically within CoreParserFunctions.Php and Sanitizer.Php. While the exact method of exploitation and its consequences are not fully detailed,...

CVE-2025-67484

A flaw was found in MediaWiki. This vulnerability is associated with the includes/Api/ApiFormatXml.Php file. An attacker with high privileges could potentially interact with this flaw. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the...

CVE-2025-6927

A flaw was found in MediaWiki, specifically within the handling of block lists via BlockListPager.Php and ApiQueryBlocks.Php. A remote attacker could exploit this vulnerability with user interaction to achieve low confidentiality impact, potentially disclosing limited information related to block...

CVE-2025-67477

A flaw was found in MediaWiki. An Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, vulnerability exists in the ApiSandboxLayout.Js program file. This flaw could potentially allow an attacker with high privileges to inject malicious scripts into...