Lucene search
K

39 matches found

RedhatCVE
RedhatCVE
added 2026/04/08 7:57 p.m.1 views

CVE-2026-39838

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows XSS Targeting Non-Script Elements. The issue has been remediated on the master branch, and in the release branches for MediaWiki...

6.9CVSS5.8AI score0.00067EPSS
Exploits0References1
NVD
NVD
added 2026/04/07 8:16 p.m.2 views

CVE-2026-39838

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows XSS Targeting Non-Script Elements. The issue has been remediated on the master branch, and in the release branches for MediaWiki...

6.9CVSS0.00067EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/07 7:17 p.m.4 views

CVE-2026-39838

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows XSS Targeting Non-Script Elements.This issue affects...

6.9CVSS5.9AI score0.00067EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/07 7:17 p.m.13 views

CVE-2026-39838 ProofreadPage improperly sanitizes multiline styles using Sanitizer::checkCSS

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows XSS Targeting Non-Script Elements. The issue has been remediated on the master branch, and in the release branches for MediaWiki...

6.9CVSS0.00067EPSS
Exploits0References2
CVE
CVE
added 2026/04/07 7:17 p.m.3 views

CVE-2026-39838

CVE-2026-39838 affects the Wikimedia Foundation MediaWiki ProofreadPage extension . The flaw is due to improper neutralization of input during web page generation , enabling cross-site scripting (XSS) targeting Non-Script Elements. The CVE record notes the issue is tied to the ProofreadPage’s han...

6.9CVSS5.8AI score0.00067EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/07 7:17 p.m.2 views

CVE-2026-39838 ProofreadPage improperly sanitizes multiline styles using Sanitizer::checkCSS

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows XSS Targeting Non-Script Elements. The issue has been remediated on the master branch, and in the release branches for MediaWiki...

6.9CVSS5.7AI score0.00067EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/07 12:0 a.m.2 views

MediaWiki - ProofreadPage Extension 安全漏洞

MediaWiki - ProofreadPage Extension is an open-source documentation comparison plugin for MediaWiki. The MediaWiki - ProofreadPage Extension has a security vulnerability, which stems from improper input during page generation. This vulnerability may lead to cross-site scripting attacks targeting...

6.9CVSS5.6AI score0.00067EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/07 12:0 a.m.2 views

PT-2026-30991

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows XSS Targeting Non-Script Elements.This issue affects...

6.9CVSS5.9AI score0.00067EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 12:35 p.m.7 views

CVE-2023-45373

An issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. XSS can occur via formatNumNoSeparators...

6.1CVSS6.1AI score0.00311EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:19 a.m.4 views

CVE-2026-0670

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows Cross-Site Scripting XSS.This issue affects MediaWiki - ProofreadPage Extension: 1.45, 1.44, 1.43, 1.39...

6.1CVSS5.9AI score0.00063EPSS
Exploits1References1
NVD
NVD
added 2026/01/07 7:15 p.m.1 views

CVE-2026-0670

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows Cross-Site Scripting XSS.This issue affects MediaWiki - ProofreadPage Extension: 1.45, 1.44, 1.43, 1.39...

6.1CVSS0.00063EPSS
Exploits1References2
OSV
OSV
added 2026/01/07 7:15 p.m.1 views

CVE-2026-0670

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows Cross-Site Scripting XSS.This issue affects MediaWiki - ProofreadPage Extension: 1.45, 1.44, 1.43, 1.39...

6.1CVSS5.8AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/07 6:55 p.m.3 views

CVE-2026-0670 Stored XSS through a system message and a user-provided parameter in ProofreadPage

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows Cross-Site Scripting XSS.This issue affects MediaWiki - ProofreadPage Extension: 1.45, 1.44, 1.43, 1.39...

5.5AI score0.00063EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/01/07 6:55 p.m.18 views

CVE-2026-0670 Stored XSS through a system message and a user-provided parameter in ProofreadPage

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows Cross-Site Scripting XSS.This issue affects MediaWiki - ProofreadPage Extension: 1.45, 1.44, 1.43, 1.39...

0.00063EPSS
Exploits1References2
CVE
CVE
added 2026/01/07 6:55 p.m.5 views

CVE-2026-0670

CVE-2026-0670 is a Cross-Site Scripting (XSS) vulnerability in the Wikimedia Foundation MediaWiki ProofreadPage Extension. The issue stems from improper input neutralization during web page generation and affects ProofreadPage Extension versions 1.39, 1.43, 1.44, and 1.45. Remediation guidance fr...

6.1CVSS5.5AI score0.00063EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.3 views

PT-2026-1966

Name of the Vulnerable Software and Affected Versions MediaWiki - ProofreadPage Extension versions 1.39 through 1.45 Description The MediaWiki - ProofreadPage Extension contains a flaw related to improper input neutralization during web page generation, leading to a Cross-Site Scripting XSS issue...

6.1CVSS6.1AI score0.00063EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.1 views

MediaWiki - ProofreadPage Extension 安全漏洞

MediaWiki - ProofreadPage Extension is an open source document cross-referencing plugin for MediaWiki. A security vulnerability exists in MediaWiki - ProofreadPage Extension versions 1.45, 1.44, 1.43, and 1.39, which stems from improper input neutralization and could lead to a cross-site scriptin...

6.1CVSS6.1AI score0.00063EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-41209

Malicious code in bioql PyPI...

5.3CVSS5.4AI score0.00269EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-49665

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00311EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2023-37305

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the ProofreadPage aka Proofread Page extension for MediaWiki through 1.39.3. In includes/Page/PageContentHandler.php and...

5.3CVSS5.6AI score0.00269EPSS
Exploits1References2
Rows per page
Query Builder