CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

23 matches found

Kitploit•added 2026/10/03 5:49 p.m.•6 views

CVE-2026-100381

CVE-2026-100381: XSS basado en DOM en los títulos de colecciones y conjuntos de Flickr Reporter: Marco Paciaroni BomboBombone. UploadWizard insertaba los títulos de colecciones y conjuntos de Flickr a través de una API que interpretaba las cadenas como HTML. Por lo tanto, los metadatos externos d...

5.3CVSS6.4AI score0.0033EPSS

SaveExploits0References1

EUVD•added 2026/09/26 12:32 a.m.•11 views

EUVD-2026-87347

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - UploadWizard Extension allows Cross-Site Scripting XSS. This issue affects Mediawiki - UploadWizard Extension: from before 1.46.1, 1.45.5, 1.43.10...

5.3CVSS5.8AI score0.0033EPSS

SaveExploits0References3

NVD•added 2026/09/25 10:17 p.m.•18 views

CVE-2026-100381

5.3CVSS0.0033EPSS

SaveExploits0References2

Vulnrichment•added 2026/09/25 9:00 p.m.•14 views

CVE-2026-100381 UploadWizard Flickr collection and set titles allow DOM XSS

5.3CVSS5.8AI score0.0033EPSS

SaveExploits0References2

CVE•added 2026/09/25 9:00 p.m.•9 views

CVE-2026-100381

The Wikimedia Foundation Mediawiki - UploadWizard Extension is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Specifically, the Flickr collection and set titles allow for DOM XSS . This issue affects versions prior to 1.46.1 , 1.45.5 ,...

5.3CVSS5.8AI score0.0033EPSS

SaveExploits0References2

Cvelist•added 2026/09/25 9:00 p.m.•28 views

CVE-2026-100381 UploadWizard Flickr collection and set titles allow DOM XSS

5.3CVSS0.0033EPSS

SaveExploits0References2

Positive Technologies•added 2026/09/25 12:00 a.m.•4 views

PT-2026-99125

Name of the Vulnerable Software and Affected Versions Mediawiki - UploadWizard Extension versions prior to 1.46.1 Mediawiki - UploadWizard Extension version 1.45.5 Mediawiki - UploadWizard Extension version 1.43.10 Description Improper neutralization of input during web page generation allows for...

5.3CVSS5.8AI score0.0033EPSS

SaveExploits0References7

Rapid7 Vulnerability Database (full)•added 2026/09/25 12:00 a.m.•5 views

CVE-2026-100381: Improper Neutralization of Input During Web Page Generation

5.3CVSS5.9AI score0.0033EPSS

SaveExploits0References2

RedhatCVE•added 2026/01/10 5:41 a.m.•17 views

CVE-2026-0671

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki - UploadWizard extension allows Cross-Site Scripting XSS.This issue affects MediaWiki - UploadWizard extension: 1.45, 1.44, 1.43, 1.39...

6.1CVSS5.9AI score0.00241EPSS

SaveExploits1References1

OSV•added 2026/01/08 5:15 p.m.•15 views

CVE-2026-0671

6.1CVSS5.8AI score0.00241EPSS

SaveExploits1References2

NVD•added 2026/01/08 5:15 p.m.•23 views

CVE-2026-0671

6.1CVSS0.00241EPSS

SaveExploits1References2

Vulnrichment•added 2026/01/08 4:21 p.m.•17 views

CVE-2026-0671 Multiple stored i18n/message-key XSSes in UploadWizard

5.8AI score0.00241EPSS

SaveExploits1References2

Cvelist•added 2026/01/08 4:21 p.m.•52 views

CVE-2026-0671 Multiple stored i18n/message-key XSSes in UploadWizard

0.00241EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2026/01/08 12:00 a.m.•6 views

CVE-2026-0671: Improper Neutralization of Input During Web Page Generation

6.1CVSS5.8AI score0.00241EPSS

SaveExploits1References1

Positive Technologies•added 2026/01/08 12:00 a.m.•43 views

PT-2026-1967

Name of the Vulnerable Software and Affected Versions MediaWiki - UploadWizard extension versions 1.39 through 1.45 Description The MediaWiki - UploadWizard extension contains a flaw related to improper input neutralization during web page generation, which could allow for Cross-Site Scripting XS...

6.1CVSS6AI score0.00241EPSS

SaveExploits1References5

CNNVD•added 2026/01/08 12:00 a.m.•23 views

MediaWiki - UploadWizard Extension 安全漏洞

MediaWiki - UploadWizard Extension is an open source file upload plugin for MediaWiki. A security vulnerability exists in MediaWiki - UploadWizard Extension versions 1.45, 1.44, 1.43, and 1.39, which stems from improper input neutralization and could lead to a cross-site scripting attack...

6.1CVSS6.2AI score0.00241EPSS

SaveExploits1References3

RedhatCVE•added 2025/10/20 7:28 p.m.•22 views

CVE-2025-62663

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - UploadWizard Extension allows Stored XSS.This issue affects Mediawiki - UploadWizard Extension: from master before 1.39...

6.9CVSS6AI score0.00449EPSS

SaveExploits0References1

NVD•added 2025/10/18 5:15 a.m.•19 views

CVE-2025-62663

6.9CVSS0.00449EPSS

SaveExploits0References2

Cvelist•added 2025/10/18 4:16 a.m.•24 views

CVE-2025-62663 Stored XSS through a system message in UploadWizard

6.9CVSS0.00449EPSS

SaveExploits0References2

Vulnrichment•added 2025/10/18 4:16 a.m.•5 views

CVE-2025-62663 Stored XSS through a system message in UploadWizard

6.9CVSS5.7AI score0.00449EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by