CVE-2026-100243 Stored XSS in WikiSEO author and image properties on action=info

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - WikiSEO Extension allows Stored XSS. This issue affects Mediawiki - WikiSEO Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-100243 Stored XSS in WikiSEO author and image properties on action=info

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - WikiSEO Extension allows Stored XSS. This issue affects Mediawiki - WikiSEO Extension: from before 1.46.1, 1.45.5, 1.43.10...

EUVD-2021-32239

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-45473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit to an action=info URL aka a page-information sidebar...

PT-2022-15057

Name of the Vulnerable Software and Affected Versions ShortDescription versions prior to 2.3.4 Description A cross-site scripting XSS issue exists in the ShortDescription MediaWiki extension. This allows XSS to be triggered on any page or the page with the action=info parameter, which displays th...

CVE-2022-21710: Improper Neutralization of Input During Web Page Generation

ShortDescription is a MediaWiki extension that provides local short description support. A cross-site scripting XSS vulnerability exists in versions prior to 2.3.4. On a wiki that has the ShortDescription enabled, XSS can be triggered on any page or the page with the action=info parameter, which...

CVE-2021-45473

In MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit to an action=info URL aka a page-information sidebar...

CVE-2021-45473

In MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit to an action=info URL aka a page-information sidebar...

CVE-2021-45473

CVE-2021-45473 affects MediaWiki up to version 1.37 with Wikibase item descriptions allowing XSS, triggered when visiting an action=info page (page-information sidebar). Multiple connected sources (OSV, CNVD, Nessus/NASL notes) corroborate that the flaw stems from insufficient escaping/validation...

CVE-2021-45473: Improper Neutralization of Input During Web Page Generation

In MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit to an action=info URL aka a page-information sidebar...

DRUPAL-CONTRIB-2020-003

Views Bulk Operations provides enhancements to running bulk actions on views. The module contains an access bypass vulnerability that might allow users to execute views actions that they should not have access to. This vulnerability is mitigated by the fact that it only occurs in the case of...

PT-2020-23047

Views Bulk Operations provides enhancements to running bulk actions on views. The module contains an access bypass vulnerability that might allow users to execute views actions that they should not have access to. This vulnerability is mitigated by the fact that it only occurs in the case of...