CVE-2025-62665

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - Skin:BlueSky allows Stored XSS.This issue affects Mediawiki - Skin:BlueSky: from master before 1.39...

CVE-2025-62665 Stored XSS through system messages in Skin:BlueSky

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - Skin:BlueSky allows Stored XSS.This issue affects Mediawiki - Skin:BlueSky: from master before 1.39...

CVE-2025-62665

CVE-2025-62665 is a stored XSS vulnerability in the Wikimedia Foundation MediaWiki Skin:BlueSky. The root cause is improper neutralization of input during web page generation, allowing stored scripts to execute when pages are rendered by the BlueSky skin. Affected software: MediaWiki Skin:BlueSky...

EUVD-2025-34941

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...

Mediawiki - AdvancedSearch Extension 安全漏洞

Mediawiki - AdvancedSearch Extension is an extension plugin for MediaWiki that enhances the search functionality, often used in conjunction with CirrusSearch and Elastica, to significantly improve search efficiency and accuracy. A cross-site scripting vulnerability exists in MediaWiki -...

Mediawiki - UploadWizard Extension 安全漏洞

Mediawiki - UploadWizard Extension is an open source file upload plugin for Mediawiki. A security vulnerability exists in Mediawiki - UploadWizard Extension master version to versions prior to 1.39, which stems from improper input neutralization during web page generation and could lead to stored...

CVE-2025-62652

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...

CVE-2025-62653

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki PollNY extension allows Stored XSS.This issue affects MediaWiki PollNY extension: 1.39, 1.43, 1.44...

CVE-2025-62655 SQL injection in Cargo via Special:CargoExport

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44...

CVE-2025-62655

Summary: CVE-2025-62655 is a SQL Injection vulnerability in the Wikimedia MediaWiki Cargo extension. Concrete details from the connected document indicate affected package versions are mediawiki/cargo 1.39, 1.43, and 1.44, with the vulnerability exploitable via the CargoExport.php endpoint where ...

CVE-2025-62654 Stored XSS through system messages in QuizGame

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44...

CVE-2025-62654

CVE-2025-62654 is a stored XSS vulnerability in the Wikimedia Foundation MediaWiki QuizGame extension, affecting versions 1.39, 1.43, and 1.44. Root cause: improper neutralization of input during web page generation. The available documents do not specify exploitation status or a fixed version. M...

CVE-2025-62653 Stored XSS through system messages in PollNY

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki PollNY extension allows Stored XSS.This issue affects MediaWiki PollNY extension: 1.39, 1.43, 1.44...

Mediawiki - QuizGame Extension 安全漏洞

Mediawiki - QuizGame Extension is an open source quiz management plugin for Mediawiki. A security vulnerability exists in Mediawiki - QuizGame Extension versions 1.39, 1.43, and 1.44, which originates from improper input neutralization during web page generation and could lead to a stored...

Mediawiki - PollNY Extension 安全漏洞

Mediawiki - PollNY Extension is an open source appearance plugin for Mediawiki. A security vulnerability exists in Mediawiki - PollNY Extension versions 1.39, 1.43, and 1.44, which originates from improper input neutralization during page generation and could lead to a stored cross-site scripting...

EUVD-2021-12338

Malware in sbrugna...

EUVD-2013-1022

Malware in sbrugna...

PT-2025-38948

Name of the Vulnerable Software and Affected Versions Essekia Helpie FAQ versions through 1.39 Description A hard-coded credentials issue exists in Essekia Helpie FAQ, potentially allowing retrieval of embedded sensitive data. The issue affects the application's functionality related to...

Service Update 1.39 for Microsoft Dynamics CRM (on-premises) 9.1

None None...

CVE-2025-7362

The MsUpload extension for MediaWiki is vulnerable to stored XSS via the msu-continue system message, which is inserted into the DOM without proper sanitization. The vulnerability occurs in the file upload UI when the same filename is uploaded twice. This issue affects Mediawiki - MsUpload...