Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2025/10/20 7:28 p.m.4 views

CVE-2025-62654

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44...

2CVSS6AI score0.00039EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/18 12:31 a.m.2 views

EUVD-2025-34939

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44...

2CVSS5.6AI score0.00039EPSS
Exploits0References2
NVD
NVD
added 2025/10/17 11:15 p.m.2 views

CVE-2025-62654

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44...

2CVSS0.00039EPSS
Exploits0References1
CVE
CVE
added 2025/10/17 10:38 p.m.5 views

CVE-2025-62654

CVE-2025-62654 is a stored XSS vulnerability in the Wikimedia Foundation MediaWiki QuizGame extension, affecting versions 1.39, 1.43, and 1.44. Root cause: improper neutralization of input during web page generation. The available documents do not specify exploitation status or a fixed version. M...

2CVSS5.7AI score0.00039EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/17 10:38 p.m.5 views

CVE-2025-62654 Stored XSS through system messages in QuizGame

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44...

2CVSS0.00039EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/17 10:38 p.m.1 views

CVE-2025-62654 Stored XSS through system messages in QuizGame

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44...

2CVSS5.7AI score0.00039EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/17 12:0 a.m.1 views

Mediawiki - QuizGame Extension 安全漏洞

Mediawiki - QuizGame Extension is an open source quiz management plugin for Mediawiki. A security vulnerability exists in Mediawiki - QuizGame Extension versions 1.39, 1.43, and 1.44, which originates from improper input neutralization during web page generation and could lead to a stored...

2CVSS5.9AI score0.00039EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2022-34216

Malicious code in bioql PyPI...

9.8CVSS8.9AI score0.00391EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 10:48 p.m.5 views

CVE-2022-29906

The admin API module in the QuizGame extension for MediaWiki through 1.37.2 before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66 omits a check for the quizadmin user...

9.8CVSS6.9AI score0.00391EPSS
Exploits1References1
OSV
OSV
added 2022/04/29 4:15 a.m.9 views

CVE-2022-29906

The admin API module in the QuizGame extension for MediaWiki through 1.37.2 before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66 omits a check for the quizadmin user...

9.8CVSS6.9AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/29 4:15 a.m.0 views

CVE-2022-29906

The admin API module in the QuizGame extension for MediaWiki through 1.37.2 before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66 omits a check for the quizadmin user...

9.8CVSS7.2AI score0.00391EPSS
Exploits1References3
Prion
Prion
added 2022/04/29 4:15 a.m.18 views

Design/Logic Flaw

The admin API module in the QuizGame extension for MediaWiki through 1.37.2 before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66 omits a check for the quizadmin user...

7.5CVSS9.3AI score0.00391EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2022/04/29 3:42 a.m.502 views

CVE-2022-29906

CVE-2022-29906 affects the QuizGame extension admin API of MediaWiki up to 1.37.2 (before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66). The vulnerability arises because the admin API omits a check for the quizadmin user, enabling unauthorized access through the admin API. Connected Red Hat and OSV/p...

9.8CVSS9.4AI score0.00391EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/04/29 3:42 a.m.12 views

CVE-2022-29906

The admin API module in the QuizGame extension for MediaWiki through 1.37.2 before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66 omits a check for the quizadmin user...

9.7AI score0.00391EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/04/29 12:0 a.m.1 views

MediaWiki 安全漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.37.2 and earlier versions, which stems fro...

9.8CVSS8.1AI score0.00391EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/04/29 12:0 a.m.3 views

PT-2022-19905 · Mediawiki +1 · Mediawiki Quiz Extension +1

Name of the Vulnerable Software and Affected Versions: MediaWiki QuizGame extension versions through 1.37.2 Description: The admin API module in the QuizGame extension for MediaWiki omits a check for the quizadmin user. Recommendations: For MediaWiki QuizGame extension versions through 1.37.2,...

9.8CVSS6AI score0.11025EPSS
Exploits27References103
Rows per page
Query Builder