CVE-2026-100240

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - TemplateSandbox Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-100240

The Wikimedia Foundation Mediawiki - TemplateSandbox Extension is vulnerable to a Missing Authorization issue (CWE-862) where it fails to check read permissions for pages being previewed. This allows unauthorized users to access functionality not properly constrained by ACLs. The vulnerability af...

CVE-2026-100240 TemplateSandbox does not check read permissions for the page being previewed

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - TemplateSandbox Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-100240 TemplateSandbox does not check read permissions for the page being previewed

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - TemplateSandbox Extension: from before 1.46.1, 1.45.5, 1.43.10...

EUVD-2026-89034

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - TemplateSandbox Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-100376

A flaw was found in the MediaWiki TemplateSandbox extension. A remote attacker could exploit this vulnerability by enticing a victim into previewing a page configured with a specially crafted sandbox prefix. This flaw can lead to Cross-Site Scripting XSS, enabling the execution of arbitrary scrip...

CVE-2026-100240: Missing Authorization

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - TemplateSandbox Extension: from before 1.46.1, 1.45.5, 1.43.10...

PT-2026-102674

Name of the Vulnerable Software and Affected Versions Mediawiki - TemplateSandbox Extension versions prior to 1.46.1 Mediawiki - TemplateSandbox Extension version 1.45.5 Mediawiki - TemplateSandbox Extension version 1.43.10 Description A missing authorization issue exists in the TemplateSandbox...

CVE-2026-100376

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Cross-Site Scripting XSS. This issue affects Mediawiki - TemplateSandbox Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-100376 TemplateSandbox can be abused for XSS by asking another user to preview a page with a certain sandbox prefix

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Cross-Site Scripting XSS. This issue affects Mediawiki - TemplateSandbox Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-100376

The Wikimedia Foundation Mediawiki - TemplateSandbox Extension is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This vulnerability can be exploited by tricking another user into previewing a page that utilizes a specific sandbox prefi...

EUVD-2026-87359

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Cross-Site Scripting XSS. This issue affects Mediawiki - TemplateSandbox Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-100376 TemplateSandbox can be abused for XSS by asking another user to preview a page with a certain sandbox prefix

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Cross-Site Scripting XSS. This issue affects Mediawiki - TemplateSandbox Extension: from before 1.46.1, 1.45.5, 1.43.10...

PT-2026-99121

Name of the Vulnerable Software and Affected Versions Mediawiki - TemplateSandbox Extension versions prior to 1.46.1 Mediawiki - TemplateSandbox Extension version 1.45.5 Mediawiki - TemplateSandbox Extension version 1.43.10 Description Improper neutralization of input during web page generation...

CVE-2026-100376: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Cross-Site Scripting XSS. This issue affects Mediawiki - TemplateSandbox Extension: from before 1.46.1, 1.45.5, 1.43.10...

EUVD-2014-9298

Malware in sbrugna...

MediaWiki TemplateSandbox Extension < 1.24 XSS Vulnerability (Jan 2015) - Active Check

The TemplateSandbox extension for MediaWiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

CVE-2014-9479

Cross-site scripting XSS vulnerability in the preview in the TemplateSandbox extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via the text parameter to Special:TemplateSandbox...

Cross site scripting

Cross-site scripting XSS vulnerability in the preview in the TemplateSandbox extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via the text parameter to Special:TemplateSandbox...

CVE-2014-9479

The CVE-2014-9479 issue affects the MediaWiki TemplateSandbox extension, specifically a Cross-site Scripting (XSS) vulnerability in the preview feature. The vulnerability lies in the text parameter to Special:TemplateSandbox, allowing remote attackers to inject arbitrary web script or HTML. Affec...