Lucene search
+L

4 matches found

NVD
NVD
added 2025/01/14 5:15 p.m.10 views

CVE-2025-23081

Cross-Site Request Forgery CSRF, Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Cross Site Request Forgery, Cross-Site Scripting XSS.This issue affects Mediawiki - DataTransf...

6.1CVSS0.00182EPSS
Exploits0References7
CVE
CVE
added 2025/01/14 4:56 p.m.77 views

CVE-2025-23081

CVE-2025-23081 describes a CSRF and XSS vulnerability in the Wikimedia Foundation MediaWiki DataTransfer Extension caused by improper neutralization of input during web page generation. Affected versions are MediaWiki DataTransfer Extension 1.39.X before 1.39.11, 1.41.X before 1.41.3, and 1.42.X ...

6.1CVSS6.3AI score0.00182EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2025/01/14 4:56 p.m.4 views

CVE-2025-23081 Various security vulnerabilities in Extension:DataTransfer

Cross-Site Request Forgery CSRF, Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Cross Site Request Forgery, Cross-Site Scripting XSS.This issue affects Mediawiki - DataTransf...

6.5AI score0.00182EPSS
Exploits0References7
Cvelist
Cvelist
added 2025/01/14 4:56 p.m.21 views

CVE-2025-23081 Various security vulnerabilities in Extension:DataTransfer

Cross-Site Request Forgery CSRF, Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Cross Site Request Forgery, Cross-Site Scripting XSS.This issue affects Mediawiki - DataTransf...

0.00182EPSS
Exploits0References7
Rows per page
Query Builder