6432 matches found
MediaWiki - LastModified Extension 安全漏洞
Mediawiki - LastModified Extension is a MediaWiki extension for displaying the last modified time of a page. Mediawiki - LastModified Extension suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which...
PT-2025-42801
Name of the Vulnerable Software and Affected Versions Mediawiki - ExternalGuidance versions prior to 1.39 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Stored Cross-site Scripting XSS condition. This allows for the...
MediaWiki - PageForms extension 安全漏洞
MediaWiki - PageForms extension is an open source page editing plugin for MediaWiki. A security vulnerability exists in MediaWiki - PageForms extension version 1.44, which stems from improper input neutralization and could lead to a stored cross-site scripting attack...
CVE-2025-48087
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jason C. Memberlite Shortcodes memberlite-shortcodes allows Stored XSS.This issue affects Memberlite Shortcodes: from n/a through 1.4.1...
CVE-2025-62662
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - AdvancedSearch Extension allows Stored XSS.This issue affects Mediawiki - AdvancedSearch Extension: from master before 1.39...
Mediawiki - GrowthExperiments Extension 安全漏洞
Mediawiki - GrowthExperiments Extension is an extension to MediaWiki designed to increase new user engagement and the quality of content contributions through a task system, a recommendation mechanism and a mentor feature. A cross-site scripting vulnerability exists in Mediawiki - GrowthExperimen...
Mediawiki - Skin:BlueSky 安全漏洞
Mediawiki - Skin:BlueSky is an open source appearance plugin for Mediawiki. A security vulnerability exists in Mediawiki - Skin:BlueSky versions prior to 1.39, which stems from improper input neutralization and could lead to a stored cross-site scripting attack...
PT-2025-42678
Name of the Vulnerable Software and Affected Versions Mediawiki - UploadWizard Extension versions prior to 1.39 Description A flaw exists in the Mediawiki - UploadWizard Extension that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web pag...
PT-2025-42686
Name of the Vulnerable Software and Affected Versions Mediawiki - Cargo Extension affected versions not specified Description The Wikimedia Foundation Mediawiki - Cargo Extension contains a flaw related to improper input neutralization during web page generation, potentially leading to Stored...
Mediawiki - FlexDiagrams Extension 安全漏洞
Mediawiki - FlexDiagrams Extension is an extension to MediaWiki for embedding and displaying diagrams or flowcharts in wiki pages. Mediawiki - FlexDiagrams Extension suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...
PT-2025-42680
Name of the Vulnerable Software and Affected Versions Mediawiki - Skin:BlueSky versions prior to 1.39 Description A flaw exists in Mediawiki - Skin:BlueSky that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The...
PT-2025-42677
Name of the Vulnerable Software and Affected Versions Mediawiki - AdvancedSearch Extension versions prior to 1.39 Description A flaw exists in the Mediawiki - AdvancedSearch Extension that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web...
CVE-2025-62654 Stored XSS through system messages in QuizGame
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44...
PT-2025-42666
Name of the Vulnerable Software and Affected Versions MediaWiki PollNY extension versions 1.39, 1.43, and 1.44 Description The Wikimedia Foundation MediaWiki PollNY extension contains a flaw related to improper input neutralization during web page generation, potentially leading to Stored...
CVE-2025-8459
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Centreon Infra Monitoring Monitoring recurrent downtime scheduler modules allows Stored XSS.This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18,...
CVE-2025-58324
An improper neutralization of input during web page generation vulnerability CWE-79 in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker ...
CVE-2025-58324
An improper neutralization of input during web page generation vulnerability CWE-79 in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker ...
CVE-2025-58324
An improper neutralization of input during web page generation vulnerability CWE-79 in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker ...
