EUVD-2025-35133

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - Translate Extension allows Footprinting. Translate extension appears to use jobs to make edits to translation pages. This causes the CheckUser tool to log the wrong IP and User-Agent...

CVE-2025-62699

The CVE-2025-62699 issue affects the Wikimedia Foundation MediaWiki Translate Extension (master before 1.39). The root cause is the Translate Extension’s use of jobs to edit translation pages, which causes the CheckUser tool to log the wrong IP and User-Agent, making these edits un-auditable. Thi...

MediaWiki - Lockdown Extension 安全漏洞

MediaWiki - Lockdown Extension is an open source permission control extension for MediaWiki. A security vulnerability exists in MediaWiki - Lockdown Extension versions up to and including version 1.42, which stems from an improper assignment of critical resource permissions and could lead to...

MediaWiki - Translate Extension 安全漏洞

MediaWiki - Translate Extension is an open source translation extension for MediaWiki. A security vulnerability exists in Mediawiki - Translate Extension master version to versions prior to 1.39, which stems from the CheckUser tool logging the wrong IP and User-Agent, which could lead to the...

MediaWiki - PageTriage Extension 安全漏洞

MediaWiki - PageTriage Extension is an open source page triage extension for MediaWiki. A security vulnerability exists in MediaWiki - PageTriage Extension versions prior to 1.44, which stems from improper input neutralization and could lead to a stored cross-site scripting attack...

MediaWiki - WikiLambda Extension 安全漏洞

MediaWiki - WikiLambda Extension is a function hosting extension for MediaWiki open source. A security vulnerability exists in the master version of MediaWiki - WikiLambda Extension, which stems from improper input neutralization during page generation and could lead to a stored cross-site...

MediaWiki - WikiLove Extension 安全漏洞

MediaWiki - WikiLove Extension is a hosted WikiLove extension for MediaWiki open source. A security vulnerability exists in Mediawiki - WikiLove Extension version 1.39, which stems from improper input neutralization and could lead to a stored cross-site scripting attack...

MediaWiki - Thanks Extension和MediaWiki - Growth Experiments Extension 安全漏洞

MediaWiki - Thanks Extension and MediaWiki - Growth Experiments Extension are both open source MediaWiki products.MediaWiki - Thanks Extension is a thanks extension.MediaWiki - Growth Experiments Extension is a web extension. A security vulnerability exists in MediaWiki - Thanks Extension and...

MediaWiki - Springboard Extension 安全漏洞

MediaWiki - Springboard Extension is an open source navigation extension for MediaWiki. A security vulnerability exists in the master version of MediaWiki - Springboard Extension, which stems from improper neutralization of special elements in commands and could lead to a command injection attack...

MediaWiki - Wikistories 安全漏洞

MediaWiki - Wikistories is a MediaWiki open source extension for creating visual stories. A security vulnerability exists in Mediawiki - Wikistories versions prior to 1.44 that stems from improper input neutralization and could lead to a stored cross-site scripting attack...

EUVD-2025-35105

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44...

EUVD-2025-35104

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki PageForms extension allows Stored XSS.This issue affects MediaWiki PageForms extension: 1.44...

EUVD-2025-35103

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

EUVD-2025-35095

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - LanguageSelector Extension: from master before 1.39...

CVE-2025-62656

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44...

CVE-2025-62658

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

CVE-2025-62657

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki PageForms extension allows Stored XSS.This issue affects MediaWiki PageForms extension: 1.44...

UBUNTU-CVE-2025-62657

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki PageForms extension allows Stored XSS.This issue affects MediaWiki PageForms extension: 1.44...

UBUNTU-CVE-2025-62658

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki WatchAnalytics extension allows SQL Injection.This issue affects MediaWiki WatchAnalytics extension: 1.43, 1.44...

UBUNTU-CVE-2025-62656

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki GlobalBlocking extension allows Stored XSS.This issue affects MediaWiki GlobalBlocking extension: 1.43, 1.44...