78 matches found
CVE-2025-62654
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44...
CVE-2025-62653
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki PollNY extension allows Stored XSS.This issue affects MediaWiki PollNY extension: 1.39, 1.43, 1.44...
EUVD-2025-34941
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...
CVE-2025-62652
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...
CVE-2025-62653
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki PollNY extension allows Stored XSS.This issue affects MediaWiki PollNY extension: 1.39, 1.43, 1.44...
CVE-2025-62655 SQL injection in Cargo via Special:CargoExport
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44...
CVE-2025-62655
Summary: CVE-2025-62655 is a SQL Injection vulnerability in the Wikimedia MediaWiki Cargo extension. Concrete details from the connected document indicate affected package versions are mediawiki/cargo 1.39, 1.43, and 1.44, with the vulnerability exploitable via the CargoExport.php endpoint where ...
CVE-2025-62654
CVE-2025-62654 is a stored XSS vulnerability in the Wikimedia Foundation MediaWiki QuizGame extension, affecting versions 1.39, 1.43, and 1.44. Root cause: improper neutralization of input during web page generation. The available documents do not specify exploitation status or a fixed version. M...
CVE-2025-62654 Stored XSS through system messages in QuizGame
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44...
CVE-2025-62653 Stored XSS through system messages in PollNY
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki PollNY extension allows Stored XSS.This issue affects MediaWiki PollNY extension: 1.39, 1.43, 1.44...
Mediawiki - QuizGame Extension 安全漏洞
Mediawiki - QuizGame Extension is an open source quiz management plugin for Mediawiki. A security vulnerability exists in Mediawiki - QuizGame Extension versions 1.39, 1.43, and 1.44, which originates from improper input neutralization during web page generation and could lead to a stored...
Mediawiki - PollNY Extension 安全漏洞
Mediawiki - PollNY Extension is an open source appearance plugin for Mediawiki. A security vulnerability exists in Mediawiki - PollNY Extension versions 1.39, 1.43, and 1.44, which originates from improper input neutralization during page generation and could lead to a stored cross-site scripting...
EUVD-2022-49212
Malicious code in bioql PyPI...
EUVD-2022-49208
Malicious code in bioql PyPI...
CVE-2025-7362
The MsUpload extension for MediaWiki is vulnerable to stored XSS via the msu-continue system message, which is inserted into the DOM without proper sanitization. The vulnerability occurs in the file upload UI when the same filename is uploaded twice. This issue affects Mediawiki - MsUpload...
CVE-2025-53479
The CheckUser extension’s Special:CheckUser interface is vulnerable to reflected XSS via the rev-deleted-user message. This message is rendered without proper escaping, making it possible to inject JavaScript through the uselang=x-xss language override mechanism. This issue affects Mediawiki -...
CVE-2025-53501
Improper Access Control vulnerability in Wikimedia Foundation Mediawiki - Scribunto Extension allows : Accessing Functionality Not Properly Constrained by Authorization.This issue affects Mediawiki - Scribunto Extension: from 1.39.X before 1.39.12, from 1.42.X before 1.42.7, from 1.43.X before...
CVE-2025-53492
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MintyDocs Extension allows Stored XSS.This issue affects Mediawiki - MintyDocs Extension: from 1.43.X before 1.43.2...
Wikimedia Mediawiki - MintyDocs Extension 安全漏洞
Wikimedia Mediawiki - MintyDocs Extension is a document creation and management extension from the Wikimedia Foundation. A security vulnerability exists in Wikimedia Mediawiki - MintyDocs Extension that stems from improper input neutralization and could lead to a stored cross-site scripting attac...