6 matches found
EUVD-2025-20666
Malicious code in bioql PyPI...
EUVD-2024-20693
Malicious code in bioql PyPI...
CVE-2025-53479
The MediaWiki CheckUser extension is vulnerable to reflected Cross-Site Scripting (XSS) within the Special:CheckUser interface. The root cause is that the rev-deleted-user message is rendered without proper escaping, allowing an attacker to inject JavaScript using the uselang=x-xss language overr...
Wikimedia Mediawiki - CheckUser Extension 安全漏洞
Wikimedia Mediawiki - CheckUser Extension is a Wikimedia Foundation extension for querying IP addresses. A security vulnerability exists in Wikimedia Mediawiki - CheckUser Extension that stems from a rev-deleted-user message that is not properly escaped, which could lead to a reflected cross-site...
CVE-2024-23174
An issue was discovered in the PageTriage extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. XSS can occur via the rev-deleted-user, pagetriage-tags-quickfilter-label, pagetriage-triage, pagetriage-filter-date-range-format-placeholder,...
CVE-2024-23174
An issue was discovered in the PageTriage extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. XSS can occur via the rev-deleted-user, pagetriage-tags-quickfilter-label, pagetriage-triage, pagetriage-filter-date-range-format-placeholder,...